---
title: "Mail a one-time sign-in code, unauthenticated"
method: POST
path: "/v1/auth/email/send"
tags: ["auth"]
---

# Mail a one-time sign-in code, unauthenticated

`POST /v1/auth/email/send`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/auth/email/send`
- Auth: none declared

Asks WorkOS Magic Auth to mail a six-digit code. The answer is the same whether or not the address belongs to a user, so it cannot be used to discover accounts. Rate limited per address and per caller.

## Request body

- object
  - `email` string, email, required

## Response `200`

A code is on its way if that address is one of ours.

- object
  - `sent` true, required
  - `expires_in` integer, required

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `429`: Too many requests; `Retry-After` says how long to wait.
- `502`: An upstream this service depends on failed or answered nonsense.
- `503`: A capability this service was not configured with, or a practice system that could not be reached; the `type` says which.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)