Start browser authorization for a local SuperSkill agent

Creates a durable ten-minute request. The device proof is returned only in JSON; the independent browser proof appears only in the URL fragment after # in browser_url and therefore never reaches HTTP logs.

post/auth/agent/start

Request

  • Base URL: https://superskill.sh/api
  • URL: https://superskill.sh/api/auth/agent/start
  • Auth: none declared

Request body

client'codex' | 'claude-code' | 'cli' required
scopesstring[] required

Response

Bounded authorization request

request_idstring required
device_proofstring required
browser_urlstring uri required

The browser proof is present only in the URL fragment.

verification_uristring uri required
expires_ininteger required
intervalinteger required

Changes

No recorded changes to this operation across all 1 revision of this API.