---
title: "Confirm email and mint the first API key"
method: POST
path: "/v1/auth/verify"
tags: ["auth"]
---

# Confirm email and mint the first API key

`POST /v1/auth/verify`

## Request

- Base URL: `https://vdb.ai.kr` (the document declares no server; this is the origin it was published from)
- URL: `https://vdb.ai.kr/v1/auth/verify`
- Auth: none declared

The confirmation, as a POST.

Mail security gateways (Microsoft Safe Links, Mimecast, Proofpoint) open
every link in a message before the person does. A GET that verifies and
mints the key let the scanner consume the one-time key page; the person
then clicked, got "token already used", and never saw their key. The
/verify page now shows a button that POSTs here, which scanners do not
press.

## Request body

- VerifyEmailRequest
  - `token` string, required

## Response `200`

Successful Response

- AuthResponse
  - `user_id` string, required
  - `email` string, required
  - `api_key` string, nullable
  - `api_key_prefix` string, nullable
  - `email_verified` boolean
  - `verification_required` boolean
  - `message` string

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/vdb/apis/vdb-api.md) · [All operations](https://skmtc.dev/vdb/apis/vdb-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vdb/apis/vdb-api/revisions/5d5edc23ea71?raw)