---
title: "Mint a short-lived link for something only a human can do"
method: POST
path: "/api/handoff/link"
tags: ["handoff"]
---

# Mint a short-lived link for something only a human can do

`POST /api/handoff/link`

## Request

- Base URL: `https://api.zettoai.com`
- URL: `https://api.zettoai.com/api/handoff/link`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Signed, single-purpose, expires in 15 minutes. Never a long-lived magic link — those leak through forwards and screenshots.

## Request body

- object
  - `purpose` 'onboarding' | 'verify' | 'approve'

## Response `200`

Link and expiry

- object

---

[API](https://skmtc.dev/zettoai/apis/zetto-network-api.md) · [All operations](https://skmtc.dev/zettoai/apis/zetto-network-api/llms.txt) · [OpenAPI document](https://skmtc.dev/zettoai/apis/zetto-network-api/revisions/a81077177fc2?raw)