---
title: "Setup Password"
method: POST
path: "/api/v1/auth/password/setup"
tags: ["authentication"]
---

# Setup Password

`POST /api/v1/auth/password/setup`

## Request

- Base URL: `https://memory.kagura-ai.com` (the document declares no server; this is the origin it was published from)
- URL: `https://memory.kagura-ai.com/api/v1/auth/password/setup`
- Auth: none declared

Set the first password from a set-up link.

Following the link proves the mailbox, so the email is marked verified.
The account's other browser sessions are revoked; a session in this browser (the
one that asked for the link) is kept. The owner is emailed a security notice.

## Request body

- PasswordLinkBody: Body for POST /auth/password/reset and /auth/password/setup. No ``max_length`` on ``new_password``: the policy check answers an over-long password with its own message (bcrypt's 72-byte limit).
  - `token` string, required
  - `new_password` string, required

## Response `204`

Successful Response

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud.md) · [All operations](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/llms.txt) · [OpenAPI document](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/revisions/aa9df1a21db9?raw)