---
title: "Email Link Consume"
method: POST
path: "/v1/auth/email-link/consume"
---

# Email Link Consume

`POST /v1/auth/email-link/consume`

## Request

- Base URL: `https://api.quantradin.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.quantradin.com/v1/auth/email-link/consume`
- Auth: none declared

Redeem a sign-in link: single-use, unexpired, POST only.

On success: the token is spent (and any sibling login links with it), the
address is VERIFIED (clicking a link delivered to it proves it), a session
cookie is set exactly as /login sets it, and — only on the FIRST sign-in of
an account the email-link request created — the new-member hooks run once
(desks, welcome bots, attribution, the welcome email). An existing member
signing in by link gets none of them.

An UNPROVEN account (unverified, holding a password) is treated like a
password reset (security audit F08/F19): whoever typed the address at signup
is not necessarily who owns the inbox, so their password, sessions, keys and
passkeys stop working before the new session is minted.

## Request body

- EmailLinkConsumeBody
  - `token` string, required
  - `anon_id` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/quantradin/apis/vega-api.md) · [All operations](https://skmtc.dev/quantradin/apis/vega-api/llms.txt) · [OpenAPI document](https://skmtc.dev/quantradin/apis/vega-api/revisions/47add154ef38?raw)