--- title: "Loginorcreate" method: POST path: "/v1/magic_links/email/login_or_create" tags: ["Magic Links"] --- # Loginorcreate `POST /v1/magic_links/email/login_or_create` ## Request - Base URL: `https://api.stytch.com` - URL: `https://api.stytch.com/v1/magic_links/email/login_or_create` - Auth: HTTP basic Send either a login or signup Magic Link to the User based on if the email is associated with a User already. A new or pending User will receive a signup Magic Link. An active User will receive a login Magic Link. For more information on how to control the status your Users are created in see the `create_user_as_pending` flag. ### Next steps The User is emailed a Magic Link which redirects them to the provided [redirect URL](https://stytch.com/docs/guides/magic-links/email-magic-links/redirect-routing). Collect the `token` from the URL query parameters and call [Authenticate Magic Link](https://stytch.com/docs/api/authenticate-magic-link) to complete authentication. ## Request body - ApiMagicV1MagicLinksEmailLoginOrCreateRequest: Request type - `email` string, required: The email address of the end user. - `login_magic_link_url` string: The URL the end user clicks from the login Email Magic Link. This should be a URL that your app receives and parses and subsequently send an API request to authenticate the Magic Link and log in the User. If this value is not passed, the default login redirect URL that you set in your Dashboard is used. If you have not set a default login redirect URL, an error is returned. - `signup_magic_link_url` string: The URL the end user clicks from the sign-up Email Magic Link. This should be a URL that your app receives and parses and subsequently send an API request to authenticate the Magic Link and sign-up the User. If this value is not passed, the default sign-up redirect URL that you set in your Dashboard is used. If you have not set a default sign-up redirect URL, an error is returned. - `login_expiration_minutes` integer: Set the expiration for the login email magic link, in minutes. By default, it expires in 1 hour. The minimum expiration is 5 minutes and the maximum is 7 days (10080 mins). - `signup_expiration_minutes` integer: Set the expiration for the sign-up email magic link, in minutes. By default, it expires in 1 week. The minimum expiration is 5 minutes and the maximum is 7 days (10080 mins). - `login_template_id` string: Use a custom template for login emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic links - Login”. - `signup_template_id` string: Use a custom template for sign-up emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic links - Sign-up”. - `attributes` ApiAttributeV1Attributes - `ip_address` string: The IP address of the user. - `user_agent` string: The user agent of the User. - `create_user_as_pending` boolean: Flag for whether or not to save a user as pending vs active in Stytch. Defaults to false. If true, users will be saved with status pending in Stytch's backend until authenticated. If false, users will be created as active. An example usage of a true flag would be to require users to verify their phone by entering the OTP code before creating an account for them. - `code_challenge` string: A base64url encoded SHA256 hash of a one time secret used to validate that the request starts and ends on the same device. - `locale` 'en' | 'es' | 'pt-br' | 'fr' ## Response `200` Successful response - ApiMagicV1MagicLinksEmailLoginOrCreateResponse - `request_id` string, required: Globally unique UUID that is returned with every API call. This value is important to log for debugging purposes; we may ask for this value to help identify a specific API call when helping you debug an issue. - `user_id` string, required: The unique ID of the affected User. - `email_id` string, required: The unique ID of a specific email address. - `user_created` boolean, required: In `login_or_create` endpoints, this field indicates whether or not a User was just created. - `status_code` integer, required: The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors. ## Other responses - `400`: Bad request - `401`: Unauthorized - `429`: Too Many Requests - `500`: Internal server error ## Changes - **2026-03-07** `110f26a94e5b`: 1 info - endpoint added - **2026-03-06** `9cab20b8eca7`: 1 breaking - api path removed without deprecation - **2025-09-17** `8270cf3a3d4c`: 3 info - added the media type `application/json` for the response with the status `401` - added the media type `application/json` for the response with the status `500` - added the non-success response with the status `429` - **2025-09-17** `864b9f438ac0`: 5 breaking - the `create_user_as_pending` request property type changed from `string` to `boolean` - the `login_expiration_minutes` request property type changed from `string` to `integer`, and format from no format to `int32` - the `signup_expiration_minutes` request property type changed from `string` to `integer`, and format from no format to `int32` - the `status_code` response's property type changed from `string` to `integer`, and format from no format to `int32` for status `200` - …1 more [Operation history](https://skmtc.dev/stytch/apis/stytch-api/changes/v1/magic_links/email/login_or_create/post.md) --- [API](https://skmtc.dev/stytch/apis/stytch-api.md) - [All operations](https://skmtc.dev/stytch/apis/stytch-api/llms.txt) - [OpenAPI document](https://skmtc.dev/stytch/apis/stytch-api/revisions/6d1ff7474803?raw)