---
title: "Request a verified-email agent credential code"
method: POST
path: "/agent-auth/verified-email/challenge"
---

# Request a verified-email agent credential code

`POST /agent-auth/verified-email/challenge`

Auth.md verified_email flow, step 1. Mails a one-time code to the ONCE account holder. The response is identical whether or not the address has an account. Rate limited per IP and per email.

## Request body

- object
  - `email` string, required — Email of the ONCE account to act for.
  - `client_name` string — Agent name shown in the email and used as the issued token name.
  - `scopes` string[] — Requested scopes. Defaults to once:mcp.

## Response `200`

Generic acknowledgement with claim_uri and expires_in

## Other responses

- `429` — Rate limited

---

[API](https://skmtc.dev/once/apis/once-rest-api.md) · [All operations](https://skmtc.dev/once/apis/once-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/once/once-rest-api/revisions/6b7f882e04ff/schema)