---
title: "Request an API key recovery link by registered email (no auth)"
method: POST
path: "/api/rightos/organizations/recover"
tags: ["organizations"]
---

# Request an API key recovery link by registered email (no auth)

`POST /api/rightos/organizations/recover`

## Request

- Base URL: `https://rightos.i-s3.com`
- URL: `https://rightos.i-s3.com/api/rightos/organizations/recover`
- Auth: none required

Sends a single-use re-issue link (valid 30 minutes) to the registered contact email. Always returns the same 200 response regardless of whether the email is registered, to avoid account enumeration. Rate limited per IP and per email. The API key itself is never sent by email.

## Request body

- object
  - `contactEmail` string, email, required

## Response `200`

Accepted (regardless of registration status)

- object
  - `ok` boolean

## Other responses

- `400`: Invalid email
- `429`: Rate limited
- `503`: Recovery unavailable (email not configured)

---

[API](https://skmtc.dev/i-s3/apis/rightos-right-api.md) · [All operations](https://skmtc.dev/i-s3/apis/rightos-right-api/llms.txt) · [OpenAPI document](https://skmtc.dev/i-s3/apis/rightos-right-api/revisions/10020536e345?raw)
