---
title: "Show the human confirm page for a magic-link token (HTML, not JSON)"
method: GET
path: "/v1/auth/verify"
tags: ["auth"]
---

# Show the human confirm page for a magic-link token (HTML, not JSON)

`GET /v1/auth/verify`

## Request

- Base URL: `http://localhost:8000`
- URL: `http://localhost:8000/v1/auth/verify`
- Auth: none required

Step 2 — a human opens this from their email. Read-only, does NOT consume the token, safe for email-scanner prefetch. Renders an HTML page with a "Reveal my key" button; the actual key is only minted when that button is clicked, which calls POST /v1/auth/verify/confirm. **An agent cannot complete this step for a human** — there is no JSON equivalent that mints the key from the GET alone, by design.

## Query parameters

- `token` string, required

## Response `200`

Successful Response

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/scoopkit/apis/scoopkit-api.md) · [All operations](https://skmtc.dev/scoopkit/apis/scoopkit-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scoopkit/apis/scoopkit-api/revisions/18068781261d?raw)