---
title: "POST /internal/hosting/login-token/verify"
method: POST
path: "/internal/hosting/login-token/verify"
tags: ["auth"]
---

# POST /internal/hosting/login-token/verify

`POST /internal/hosting/login-token/verify`

Resolve a private docs magic link token to its login payload. Tokens stay valid for multiple uses until they expire, so email scanners that prefetch the link cannot lock the visitor out.

## Request body

- object
  - `token` string, required

## Response `200`

Default Response

- object
  - `email` string, email, required
  - `host` string, required
  - `redirect` string
  - `loginPortalUid` string
  - `exp` number, required

## Other responses

- `400` — Bad request
- `401` — No auth
- `403` — Forbidden
- `404` — Not found
- `422` — Invalid payload
- `500` — Uncaught error

---

[API](https://skmtc.dev/scalar/apis/core.md) · [All operations](https://skmtc.dev/scalar/apis/core/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/scalar/core/revisions/3aaac58e615d/schema)