---
title: "Request an API key recovery code"
method: POST
path: "/v1/auth/recover"
tags: ["auth"]
---

# Request an API key recovery code

`POST /v1/auth/recover`

## Request

- Base URL: `https://api.strale.io`
- URL: `https://api.strale.io/v1/auth/recover`
- Auth: none declared

Sends a single-use recovery code to the account's email address. Your current API key keeps working — nothing is rotated until the code is redeemed at /v1/auth/recover/confirm. The response body and status are identical whether or not an account exists. Response TIMING is not equalised, so this is not a constant-time oracle.

## Request body

- object
  - `email` string, email, required

## Response `200`

Accepted (whether or not an account exists)

- object
  - `message` string
  - `expires_in_minutes` integer

## Other responses

- `400`: A valid email address is required.

---

[API](https://skmtc.dev/strale/apis/strale-api-2.md) · [All operations](https://skmtc.dev/strale/apis/strale-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/strale/apis/strale-api-2/revisions/a5293878cfc6?raw)