Bootstrap

Email a one-time code

Sends a 6-digit code to the address, valid for a short window and usable once. Takes no credential — this is the entry point for a client that has none. Rate limited per email (2/minute), per IP (5/hour) and per IP across the whole bootstrap branch (20/hour). The response is identical whether or not the address already has an account, so it cannot be used to test for one.

post/auth/send-otp

Request

Request body

emailstring email required

The address that will receive the code and own the account.

Example request

{
  "email": "agent@yourcompany.com"
}

Response

The code was sent.

sentboolean required

Always true. Says nothing about whether the account existed.

emailstring email required

The normalized (lower-cased, trimmed) address.

Changes

No recorded changes to this operation across all 1 revision of this API.