Auth

Sign up with email + password

Creates a new user account. When email confirmation is required on the Supabase project, returns { user, email_confirmation_required: true } without issuing a session cookie; the user must click the email link. When auto-confirm is on, issues mnemom_session and returns { user } — except for an email domain that enforces SSO, which gets 403 sso_required (503 sso_check_unavailable if the SSO lookup fails) and no session; that user signs in through SSO. If the email already has an account, the response is identical to a new confirmation-required signup (200 { user: null, email_confirmation_required: true }) so the endpoint cannot be used to enumerate registered emails (CWE-203); no duplicate account is created, and the existing owner is emailed sign-in / reset links out-of-band. Supersedes the earlier 409 email_exists behavior (MNE-1348). Invite variant (MNE-8331): a valid invite_token that vouches for email skips email confirmation and returns a live session (see invite_token).

post/auth/sign-up

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/sign-up
  • Auth: none required

Request body

emailstring email required
passwordstring password required
redirect_tostring uri

Allowlisted SPA path to return to after email confirmation.

invite_tokenstring

Optional product-invite token (pinv_…) from an invite link. When it resolves to a PENDING, email-bound invite whose own invitee email equals email exactly (trimmed, case-insensitive), the account is created with its email already verified and a session is issued ({ user }, no email_confirmation_required) — the invite email already proved inbox control. Applies on the Zitadel identity provider; on a GoTrue-backed deployment the token is ignored and the normal confirmation-required answer is returned. The invite is NOT accepted by this call (use POST /invites/accept). Any other value (unknown, used, expired, revoked, user-bound, or a different email) is silently ignored and the response is identical to a sign-up without the token; no response reveals whether a token exists or whether the email matched (MNE-1348).

Response

Account created. Either returns a full session (auto-confirm) or awaits email confirmation.

email_confirmation_requiredtrue required

Changes

No recorded changes to this operation across all 1 revision of this API.