Create an account from a trusted backend

​

Expected result

Operator-approved creation credentials
        ↓
Account creation request signed for the exact Neuron host
        ↓
Required email and phone verification
        ↓
Enabled account and a fresh authenticated session

​

Prerequisites

• Exact Neuron host and environment semantics.
• Account-creation API key and secret from that Neuron’s operator.
• Operator-confirmed account quota and verification policy.
• A trusted backend secret store.
• A user interaction for collecting and confirming required contact details.

​

Procedure

1. Optionally retrieve GET /Agent/Account/DomainInfo and confirm the user selected the intended Neuron.
2. Read the generated POST /Agent/Account/Create schema and its signature message. Sign the documented canonical message with the API secret; do not replace it with a signature over only the nonce.
3. Submit the account request from the backend and retain only the safe identifiers, status, and session state the application needs.
4. Complete the required VerifyEMail and VerifyPhoneNr operations for the deployment.
5. Establish a fresh session through the verified login flow rather than assuming the creation response represents a fully enabled account.
6. Retrieve Account/Info and verify the resulting account state.

​

Security notes

• Never send the account-creation API secret to a browser or mobile binary.
• Bind every signature to the exact documented fields and host.
• Generate a fresh unpredictable nonce for every signed request.
• Do not log passwords, secrets, nonces, verification codes, or returned JWTs.
• Apply user-interface throttling without inventing undocumented server rate limits or retry windows.

​

Verification

​

Next

• Create a cryptographic key
• Apply for a Legal Identity
• Accounts and onboarding reference