---
title: "Start a claim ceremony"
method: POST
path: "/agent/auth/claim"
tags: ["agent-auth"]
---

# Start a claim ceremony

`POST /agent/auth/claim`

## Request

- Base URL: `https://www.supersetapp.com`
- URL: `https://www.supersetapp.com/agent/auth/claim`
- Auth: none required

Step 4a: binds the registration to a person's email and returns the ceremony to relay to them. It does NOT return a credential — once they confirm, poll `issueAgentToken` with the claim grant.

## Request body

- object

## Response `200`

The ceremony to relay to the person.

- ClaimCeremony: A started claim ceremony, for the agent to relay to a person.
  - `registration_id` string, required
  - `claim_attempt_id` string, required
  - `status` string, required
  - `expires_at` string, date-time, required: When this attempt stops being confirmable.
  - `claim_attempt` Ceremony, required: RFC 8628-shaped: the code a person types, and where.
    - `user_code` string, required: What the person types.
    - `verification_uri` string, uri, required: Where they type it.
    - `expires_in` integer, required: Seconds the code lasts.
    - `interval` integer, required: Seconds between polls.

## Other responses

- `400`: Malformed body, or a missing or unusable `email`.
- `401`: The claim token is invalid.
- `409`: Already claimed; mint credentials at the token endpoint.
- `410`: The registration expired; start the ceremony again.
- `429`: Too many claim attempts. Back off and retry.

---

[API](https://skmtc.dev/supersetapp/apis/superset-api.md) - [All operations](https://skmtc.dev/supersetapp/apis/superset-api/llms.txt) - [OpenAPI document](https://skmtc.dev/supersetapp/apis/superset-api/revisions/80be14a3d402?raw)