Endpoints
Typical onboarding flow
- Call
DomainInfoto display the domain name and description to the user (optional). - Call
Createwith HMAC-signed credentials to create the account and receive an initial JWT. - Prompt the user to enter the verification code sent to their email address.
- Call
VerifyEMailto activate the account. - Call
Loginto get a fresh JWT for ongoing API use.
Authentication notes
DomainInforequires no authentication.CreateandCreateWebFormrequire an HMAC-signed API key — see the Authentication guide.- All other endpoints in this group require a JWT bearer token obtained from
CreateorLogin. - New accounts are disabled until email verification is complete. Disabled accounts cannot use most other endpoints.
Related
- Authentication & sessions — log in, refresh, and manage tokens after account creation.
- User onboarding guide — step-by-step walkthrough of the full onboarding flow.
- Authentication guide — how HMAC signing and JWT tokens work.