---
title: "POST /api/v1/x/account-connection-challenges/{id}/submit"
method: POST
path: "/api/v1/x/account-connection-challenges/{id}/submit"
tags: ["X Accounts"]
---

# POST /api/v1/x/account-connection-challenges/{id}/submit

`POST /api/v1/x/account-connection-challenges/{id}/submit`

## Request

- Base URL: `https://xquik.com`
- URL: `https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit`
- Auth: API key in cookie `__Host-xquik_session`

Submits the email code requested during X account connection. Needs a dashboard session.

## Path parameters

- `id` string, required

## Request body

- object
  - `email_code` string, required: Code sent to the account email.

## Response `201`

X account connected

- SanitizedXAccount: Sanitized X account summary returned by connect and reauth.
  - `id` string, required
  - `xUserId` string, required
  - `xUsername` string, required
  - `status` 'active', required
  - `health` 'healthy' | 'locked' | 'needsReauth' | 'recovering' | 'suspended' | 'temporaryIssue', required
  - `createdAt` string, date-time, required

## Other responses

- `202`: Email verification code required
- `400`: Invalid input. A value past its maxLength gets this answer, & the message names the field & its limit.
- `401`: Unauthenticated
- `403`: An API key or OAuth token called a route that needs a dashboard session. Sign in at dashboard.xquik.com/account instead.
- `404`: Not found
- `409`: Verification challenge is no longer active
- `410`: Verification code expired
- `422`: Login requires new credentials, account verification, or a wait. Cooldowns include `retryAfterMs` and `Retry-After`. Codes are `login_failed` or `passkey_required`. `reason` is `account_not_found` (unknown username), `repeated_login_error`, or `login_unconfirmed` (X showed no known page after the password). Retrying a `login_unconfirmed` login before `Retry-After` can make X lock the account.
- `429`: Too many requests right now. Each user gets 500 reads a second. Each minute allows 120 writes & 60 deletes. `x_api_rate_limited` means X limits this read for now. Neither answer costs anything. Wait for the seconds in `Retry-After`, then retry.
- `500`: Unexpected error.
- `503`: The X connection service is temporarily unavailable. Retry shortly. The error code is `service_unavailable`.
- `default`: Unexpected error.

## Changes

- **2026-10-20** `45942c75fdc2`: 22 warning
  - added the new `topup_in_progress` enum value to the `allOf[#/components/schemas/Error]/error/oneOf[subschema #1: LegacyErrorCode]/` response property for the response status `429`
  - added the new `topup_in_progress` enum value to the `allOf[#/components/schemas/Error]/error/oneOf[subschema #2: StructuredError]/code` response property for the response status `429`
  - added the new `topup_in_progress` enum value to the `error/oneOf[subschema #1: LegacyErrorCode]/` response property for the response status `400`
  - added the new `topup_in_progress` enum value to the `error/oneOf[subschema #1: LegacyErrorCode]/` response property for the response status `401`
  - …18 more

[Operation history](https://skmtc.dev/xquik-dev/apis/xquik-api/changes/api/v1/x/account-connection-challenges/:id/submit/post.md)

---

[API](https://skmtc.dev/xquik-dev/apis/xquik-api.md) · [All operations](https://skmtc.dev/xquik-dev/apis/xquik-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xquik-dev/apis/xquik-api/revisions/45942c75fdc2?raw)