---
title: "Look up a device verification code"
method: GET
path: "/v1/auth/device"
tags: ["Account"]
---

# Look up a device verification code

`GET /v1/auth/device`

## Request

- Base URL: `https://api.spacefast.com`
- URL: `https://api.spacefast.com/v1/auth/device`
- Auth: none declared

Returns the requester context for a user code so the approval page can show what is being authorized.

## Query parameters

- `user_code` string, required: User code typed by the person approving the device (dashes ignored).

## Response `200`

Response for status 200

- object
  - `$schema` string, uri: Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.
  - `data` object, required
    - `status` 'pending' | 'approved' | 'denied' | 'expired' | 'consumed', required: Device authorization state. `approved` carries the one-time API key exactly once, then the record is `consumed`.
    - `clientId` string, nullable, required: Requesting client identifier recorded at device start.
    - `requestedAccess` object, required: Server-resolved access request. Ids only; copy is derived client-side.
      - `profile` 'read' | 'agent' | 'agent-personal-pages', nullable, required: Access profile the requested scopes exactly match, if any.
      - `scopes` string[], required: Scopes the device requested. The approval page renders exactly these.
    - `origin` string, nullable, required: Request origin (client IP) recorded when the device flow started.
    - `expiresAt` string, date-time, required: Instant after which this device authorization can no longer be approved.
    - `claim` object, nullable, required: Explicit claim handoff attached to this device authorization, if any.
      - `spaceId` string, required: Anonymous space that will be claimed if approval succeeds.
      - `title` string, nullable, required: Display title of the anonymous space, if available.
      - `liveUrl` string, nullable, required: Current live URL of the anonymous space, if any.

## Other responses

- `default`: Problem details (RFC 9457). Any 4xx/5xx response is one `application/problem+json` document.

---

[API](https://skmtc.dev/spacefast/apis/spacefast-api.md) · [All operations](https://skmtc.dev/spacefast/apis/spacefast-api/llms.txt) · [OpenAPI document](https://skmtc.dev/spacefast/apis/spacefast-api/revisions/bd165bc7c983?raw)