---
title: "POST /api/auth/verify-email"
method: POST
path: "/api/auth/verify-email"
tags: ["auth", "internal"]
---

# POST /api/auth/verify-email

`POST /api/auth/verify-email`

## Request body

- VerifyEmailRequest — Request to verify email using token
  - `token` string, required

## Response `200`

Email verified successfully

- ApiResponseUser
  - `data` object
    - `email` string, required
    - `email_verified` boolean — Whether the user has verified their email address
    - `has_password` boolean — Whether the user has a password set — computed from password_hash, never stored in DB
    - `network_ids` string[], required
    - `oidc_linked_at` string, date-time, nullable
    - `oidc_provider` string, nullable
    - `organization_id` string, uuid, required
    - `permissions` 'Owner' | 'Admin' | 'Member' | 'Viewer', required
    - `terms_accepted_at` string, date-time, nullable
    - `created_at` string, date-time, required
    - `id` string, uuid, required
    - `updated_at` string, date-time, required
  - `error` string, nullable
  - `meta` ApiMeta, required — API metadata included in all responses
    - `api_version` integer, required — API version (integer, increments on breaking changes)
    - `server_version` string, required — Server version (semver)
  - `success` boolean, required

## Other responses

- `400` — Invalid or expired token

## Changes

- **2026-04-20** `f04499e2280f` — 1 warning
  - removed the optional property `data/allOf[#/components/schemas/UserBase]/email_settings` from the response with the `200` status

[Change history](https://skmtc.dev/scanopy/apis/scanopy-api/changes/api/auth/verify-email/post.md)

---

[API](https://skmtc.dev/scanopy/apis/scanopy-api.md) · [All operations](https://skmtc.dev/scanopy/apis/scanopy-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/scanopy/scanopy-api/revisions/f04499e2280f/schema)