---
title: "Consume the fragment-only browser proof"
method: POST
path: "/auth/agent/browser-bind"
---

# Consume the fragment-only browser proof

`POST /auth/agent/browser-bind`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/auth/agent/browser-bind`
- Auth: none declared

Consumes browser_proof once and sets a short-lived HttpOnly SameSite binding cookie. No account authorization occurs here.

## Request body

- AgentBrowserBindRequest
  - `request_id` string, required
  - `browser_proof` string, required

## Response `200`

Browser request bound

- object
  - `bound` unknown, required
  - `request_id` string, required

## Other responses

- `400`: Bad request
- `409`: The requested action conflicts with current product or resource state
- `410`: Authorization request expired

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)