---
title: "Login"
method: POST
path: "/api/v3.0/login"
tags: ["Access Management"]
---

# Login

`POST /api/v3.0/login`

Sign in a user with email and user key, returning a JWT token which is valid for 30 minutes.
If you omit the organization, it defaults to the last one you signed in to.

## Request body

- LoginModelDTOV3 — Login Model that provides user name and password for the Login process.
  - `email` string, required
  - `userKey` string, required — Equivalent to a personal access token. Avoid pasting as plain text where it might be compromised. For a service user (recommended), you can find the user key in the Mend SCA App in **Admin > Users**. [Learn more](https://docs.mend.io/bundle/mend_maintenance/page/managing_service_users.html). For local testing purposes, you could also use one of your own personal user keys from your user profile page in the Mend SCA App.

## Response `200`

OK

- DWRResponseV3LoginResponseDTO
  - `supportToken` string
  - `response` LoginResponseDTO
    - `userUuid` string
    - `userName` string
    - `email` string
    - `refreshToken` string
    - `jwtTTL` integer
    - `systemAccess` boolean
    - `serviceSystemAccess` boolean
    - `sessionStartTime` integer
    - `systemAccessStartTime` integer

## Other responses

- `400` — Bad Request
- `403` — Forbidden

---

[API](https://skmtc.dev/mend/apis/mend-api.md) · [All operations](https://skmtc.dev/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mend/mend-api/revisions/b2302e1b6c4c/schema)