---
title: "Finish sign-in on the chosen account"
method: POST
path: "/accounts/auth-select-account"
tags: ["Authentication"]
---

# Finish sign-in on the chosen account

`POST /accounts/auth-select-account`

## Request

- Base URL: `https://api.quiva.ai`
- URL: `https://api.quiva.ai/accounts/auth-select-account`
- Auth: none required
- TypeScript: <https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/docs/accounts/auth-select-account/post.ts> (a function with typed inputs; its response is checked against the schema)

Public. Completes an email-only sign-in that returned `select_account`. The token is single-use and every refusal is the same 401, so a token cannot be used to probe memberships. The response is `AuthResponse`, or `MfaRequiredResponse` when the account's user has TOTP on and the device is not remembered.

## Request body

- AuthSelectAccountRequest
  - `token` string, required: The `token` from the `select_account` response
  - `account_id` string, required: Id of one of the accounts in the picker list
  - `device_token` string: Remembered-device token; skips TOTP when valid

## Response `200`

Success

- object
  - `data` union, required
    - AuthResponse: Tokens and the signed-in user and account.
      - `refresh_token` string: Refresh token
      - `auth_token` string: Authentication token (JWT)
      - `passkey_enabled` boolean
      - `totp_enabled` boolean
      - `first_sign_in` boolean: True on the first sign-in after an invitation; the app routes it to MFA setup
      - `account` AccountPublicInfo
        - `name` string: Account name (normalized)
        - `id` string: Account unique identifier - 10 digits
        - `display_name` string: Account display name
        - `root_email` string, email: Root user email address
        - `subscription_status` 'active' | 'pending' | 'cancelled': Subscription status
        - `subscription_plan` string: Subscription plan
        - `emergency_credit` number, float: Emergency credit amount
        - `country` string: Country
        - `company_name` string: Company name
        - `address` string: Address
        - `website` string: Website
        - `phone_number` string: Phone number
        - `scheduled_for_deletion` boolean: Whether the account is scheduled for deletion
        - `deletion_date` string, date-time: If the account is scheduled for deletion, it will be deleted on this date
        - `region` string: Region
        - `provider` string: Provider
        - `bstier` integer: BS tier
        - `cloud` boolean: Cloud functionality enabled. It true, the user has access to quiva.ai Cloud
        - `hub` boolean: Hub functionality enabled. It true, the user has access to quiva.ai Hub
      - `user` string, email: User email
      - `user_id` string
      - `first_name` string
      - `last_name` string
      - `role` string: Role on the signed-in account
      - `mfa` MfaInfo
        - `passkey_enabled` boolean, required: Whether passkey authentication is enabled
        - `totp_enabled` boolean, required: Whether TOTP authentication is enabled
      - `theme` string
      - `sound` boolean
      - `advanced_mode` boolean
      - `voice_transcription` boolean
      - `onboarding_progress` object
      - `timezone` string
      - `notification_preferences` object
      - `folder` string: Set for client users filed under a folder
      - `device_token` string: Present when `remember_device` was set on an MFA step. Send it as `device_token` on later password sign-ins.
    - MfaRequiredResponse
      - `token` string: MFA token. Use it with the TOTP, recovery-code or passkey authentication request.
      - `passkey_enabled` boolean: Whether passkey authentication is enabled
      - `totp_enabled` boolean: Whether TOTP authentication is enabled

## Other responses

- `401`: Unauthorized

## Changes

- **2026-11-12** `700eb1ace61a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/changes/accounts/auth-select-account/post.md)

---

[API](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway.md) - [All operations](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/llms.txt) - [OpenAPI document](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/revisions/700eb1ace61a?raw)