---
title: "The production smoke test only: the last sign-in code sent to an address (404 outside the test organization)"
method: GET
path: "/builder/sessions/{sessionId}/backend/members/test-code"
tags: ["Builder"]
---

# The production smoke test only: the last sign-in code sent to an address (404 outside the test organization)

`GET /builder/sessions/{sessionId}/backend/members/test-code`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/builder/sessions/{sessionId}/backend/members/test-code`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `sessionId` string, required

## Query parameters

- `email` string, required

## Response `200`

The code

- object
  - `code` string, required

## Other responses

- `400`: Invalid request (code invalid_request; details.issues for a row that does not fit its collection)
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Another row already has this unique value (code conflict, details.reason unique)
- `501`: Site backends are not available on this server (code not_configured)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)