---
title: "Set a web-login password via a mailed single-use token"
method: POST
path: "/v1/auth/set-password"
tags: ["auth"]
---

# Set a web-login password via a mailed single-use token

`POST /v1/auth/set-password`

## Request

- Base URL: `https://vdb.ai.kr` (the document declares no server; this is the origin it was published from)
- URL: `https://vdb.ai.kr/v1/auth/set-password`
- Auth: none declared

Consume a set-password token and store the user's password hash.

Lets a passwordless (agent-funnel) account gain web-console access. The
token is single-use; on success we burn it and any siblings. The API key
is unaffected — it kept working throughout.

## Request body

- SetPasswordRequest
  - `token` string, required
  - `password` string, required

## Response `200`

Successful Response

- SetPasswordResponse
  - `ok` boolean, required
  - `email` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/vdb/apis/vdb-api.md) · [All operations](https://skmtc.dev/vdb/apis/vdb-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vdb/apis/vdb-api/revisions/5d5edc23ea71?raw)