Sign in with an existing account

Use your existing account credentials to sign in and retrieve account information. You can send these requests with any HTTP client or backend language.

Before you start

You need your account’s exact HTTPS host, username, password, and a reachable HTTPS URL identifying your application. If you have an API key and secret instead, create your sandbox account and identity first. See Get API access for both access options. For a sandbox account, use sandbox.neuro-tech.io. For another environment, use the host supplied by its operator. An account and its credentials belong to that environment. Generate a fresh nonce from at least 32 cryptographically random bytes and encode it as Base64. Use that exact string in both the signed message and the request body.

message = userName:host:nonce
signature = Base64(HMAC-SHA256(key=UTF8(accountPassword), data=UTF8(message)))

Replace the names with their values, separated by colons with no added whitespace. The host excludes https:// and paths, and includes the port if it is not the default. Use standard Base64 for the HMAC digest, not hexadecimal or Base64URL. The HMAC key is the account password. Check your language’s implementation against the authentication test vector. Send this request over HTTPS, replacing the placeholders with your host, username, nonce, and calculated signature:

POST /Agent/Account/Login HTTP/1.1
Host: <NEURON_HOST>
Referer: https://your-app.example/
Accept: application/json
Content-Type: application/json

{
  "userName": "<USERNAME>",
  "nonce": "<FRESH_NONCE>",
  "signature": "<CALCULATED_SIGNATURE>",
  "seconds": 3600
}

Replace the example Referer with your application’s URL. Include it on every Agent API request, including login and calls from a backend. Login does not require a bearer token. A successful response contains jwt and expires. Retain the JWT in your backend session and use the returned expiry when deciding whether to sign in again. See Login reference for the response schema.

3. Retrieve your account

Copy the returned jwt into the Authorization header and send an empty JSON object:

POST /Agent/Account/Info HTTP/1.1
Host: <NEURON_HOST>
Referer: https://your-app.example/
Authorization: Bearer <JWT>
Accept: application/json
Content-Type: application/json

{}

Success is an account information response for the account you signed in with. Check its identity against the intended username and host before continuing. The Account information reference describes the returned fields.

Problem	What to check
Signature rejected	Exact username, host, nonce, colon separators, UTF-8 input, and Base64 output. Sign with the account password.
New sandbox account cannot sign in	Complete sandbox account enablement.
Login succeeds but account information fails	Send the returned JWT to the same host, include `Referer`, and check expiry and account access.
A request fails or times out	Inspect the HTTP status using error handling. Generate a new nonce for another login attempt.

Continue building

Add Neuro to your application, or use your session to apply for a Legal Identity and create a contract.

Start here

Make requests

Reliability and security

API reference

Endpoints

Before you start

3. Retrieve your account

Continue building

​Before you start

​1. Calculate the login signature

​2. Sign in

​3. Retrieve your account

​Troubleshoot sign-in

​Continue building

Before you start

1. Calculate the login signature

2. Sign in

3. Retrieve your account

Troubleshoot sign-in

Continue building