---
title: "Email a sign-in link"
method: POST
path: "/api/auth/sign-in/magic-link"
---

# Email a sign-in link

`POST /api/auth/sign-in/magic-link`

## Request

- Base URL: `https://www.toma.com`
- URL: `https://www.toma.com/api/auth/sign-in/magic-link`
- Auth: none required

Sends a single-use link that expires in 5 minutes. New members complete /welcome after verification. Use /login as callbackURL, preserving its next or OAuth query. MCP clients use the browser OAuth sign-in page; this endpoint does not issue MCP access tokens. Available when email delivery is configured. Limited to 5 requests per minute per IP in production.

## Request body

- object
  - `email` string, email, required
  - `name` string
  - `callbackURL` string
  - `newUserCallbackURL` string
  - `errorCallbackURL` string

## Response `200`

Link sent, whether or not the account already exists.

- object
  - `status` boolean

## Other responses

- `400`: Invalid email or callback.
- `403`: Untrusted origin or callback.
- `404`: Email sign-in is not configured.
- `413`: The request body exceeds 2097152 bytes.
- `429`: Too many requests; retry after the Retry-After interval.
- `500`: Email delivery failed.

---

[API](https://skmtc.dev/toma/apis/toma-api.md) - [All operations](https://skmtc.dev/toma/apis/toma-api/llms.txt) - [OpenAPI document](https://skmtc.dev/toma/apis/toma-api/revisions/b4e56e1db5a2?raw)