---
title: "Forgot Password"
method: POST
path: "/v1/auth/forgot"
tags: ["auth"]
---

# Forgot Password

`POST /v1/auth/forgot`

## Request

- Base URL: `https://api.mocapless.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.mocapless.com/v1/auth/forgot`
- Auth: none declared

Send a reset link, if that address has an account.

The response is identical either way. Telling an anonymous caller whether
an address is registered turns this endpoint into an account-enumeration
oracle, which is worth more to an attacker than the reset itself.

## Request body

- ForgotPasswordRequest
  - `email` string, email, required

## Response `202`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/mocapless/apis/mocapless-api.md) · [All operations](https://skmtc.dev/mocapless/apis/mocapless-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mocapless/apis/mocapless-api/revisions/37b479a6e615?raw)