Crafting Event Finder

Crafting Event Finder Auth API

The auth API from Crafting Event Finder — 5 operation(s) for auth.

GitHub OpenAPI

Operations 5

POST /api/auth/login Email a magic sign-in link #
POST /api/auth/logout End the browser session #
GET /api/auth/me Who am I #
POST /api/auth/verify Exchange a magic-link token for a session cookie #
POST /api/auth/verify-code Exchange the emailed 6-digit sign-in code for a session cookie #

Documentation

📖
Documentation
https://craftingeventfinder.com/docs/api

Specifications

⚙
OpenAPI
https://artifacts.apis.io/craftingeventfinder-com/openapi/craftingeventfinder-com-auth-api-openapi.yml
⚙
OpenAPI
https://craftingeventfinder.com/openapi.json

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/craftingeventfinder-com/json-schema/craftingeventfinder-com-me-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/craftingeventfinder-com:craftingeventfinder-com-auth-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

craftingeventfinder-com-auth-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Crafting Event Finder Auth API
  version: 1.0.0
  description: Everything the site does is available here, and as MCP tools at /api/mcp.
servers:
- url: https://craftingeventfinder.com
tags:
- name: Auth
paths:
  /api/auth/login:
    post:
      summary: Email a magic sign-in link
      description: Always returns ok for a valid email, whether or not an account exists.
      tags:
      - Auth
      security: []
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  maxLength: 254
                  format: email
                redirectTo:
                  type: string
                  maxLength: 500
                website:
                  type: string
                turnstileToken:
                  type: string
              required:
              - email
      responses:
        '200':
          description: 200 response
          content:
            application/json:
              schema:
                type: object
                properties:
                  ok:
                    type: boolean
                    enum:
                    - true
                required:
                - ok
        '400':
          description: 400 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '403':
          description: 403 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '429':
          description: 429 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '503':
          description: 503 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
      operationId: postApiAuthLogin
      x-operation-id-source: derived
  /api/auth/logout:
    post:
      summary: End the browser session
      tags:
      - Auth
      security: []
      responses:
        '200':
          description: 200 response
          content:
            application/json:
              schema:
                type: object
                properties:
                  ok:
                    type: boolean
                    enum:
                    - true
                required:
                - ok
      operationId: postApiAuthLogout
      x-operation-id-source: derived
  /api/auth/me:
    get:
      summary: Who am I
      description: The caller's kind and scope, its account, and the account's header profile (display name and picture).
      tags:
      - Auth
      security:
      - cookieAuth: []
      - bearerAuth: []
      responses:
        '200':
          description: 200 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Me'
        '401':
          description: 401 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
      operationId: getApiAuthMe
      x-operation-id-source: derived
  /api/auth/verify:
    post:
      summary: Exchange a magic-link token for a session cookie
      description: Single use. The emailed link opens /auth/verify, which calls this so link scanners cannot burn the token.
      tags:
      - Auth
      security: []
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                token:
                  type: string
                  minLength: 10
                  maxLength: 200
              required:
              - token
      responses:
        '200':
          description: 200 response
          content:
            application/json:
              schema:
                type: object
                properties:
                  redirectTo:
                    type: string
                required:
                - redirectTo
        '401':
          description: 401 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '403':
          description: 403 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '503':
          description: 503 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
      operationId: postApiAuthVerify
      x-operation-id-source: derived
  /api/auth/verify-code:
    post:
      summary: Exchange the emailed 6-digit sign-in code for a session cookie
      description: Checks the code from the newest sign-in email for this address. Five wrong codes use it up. Every failure answers the same 400, whether or not the email has an account. A correct code also uses up the email's link.
      tags:
      - Auth
      security: []
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  maxLength: 254
                  format: email
                code:
                  type: string
                  maxLength: 20
                redirectTo:
                  type: string
                  maxLength: 500
              required:
              - email
              - code
      responses:
        '200':
          description: 200 response
          content:
            application/json:
              schema:
                type: object
                properties:
                  redirectTo:
                    type: string
                  firstSignIn:
                    type: boolean
                    description: True the moment this account's very first sign-in happened. The save panel's in-place sign-in has no page load of its own to carry welcome=1, so it reads this instead to open the "Make it yours" panel.
                required:
                - redirectTo
                - firstSignIn
        '400':
          description: 400 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '403':
          description: 403 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '429':
          description: 429 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '503':
          description: 503 response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
      operationId: postApiAuthVerifyCode
      x-operation-id-source: derived
components:
  schemas:
    User:
      type: object
      properties:
        id:
          type: string
        email:
          type: string
        displayName:
          type:
          - string
          - 'null'
        role:
          type: string
          enum:
          - user
          - organizer
          - admin
        createdAt:
          type: string
        remindersEnabled:
          type: boolean
          description: Whether the nightly saved-event reminder email is on for this account
        welcomeEmails:
          type: boolean
          description: Whether the new-account welcome series' remaining emails are still on for this account
      required:
      - id
      - email
      - displayName
      - role
      - createdAt
      - remindersEnabled
      - welcomeEmails
    Me:
      type: object
      properties:
        kind:
          type: string
          enum:
          - session
          - apiKey
        scope:
          type:
          - string
          - 'null'
          enum:
          - read
          - user
          - admin
          - null
        user:
          allOf:
          - $ref: '#/components/schemas/User'
          - type:
            - object
            - 'null'
        profile:
          allOf:
          - $ref: '#/components/schemas/HeaderProfile'
          - type:
            - object
            - 'null'
            description: The account's picture and display name for the site header; null with no user or when it can't be read
      required:
      - kind
      - scope
      - user
      - profile
    HeaderProfile:
      type: object
      properties:
        displayName:
          type:
          - string
          - 'null'
        avatarUrl:
          type:
          - string
          - 'null'
        avatarSmallUrl:
          type:
          - string
          - 'null'
        defaultAvatar:
          type: string
      required:
      - displayName
      - avatarUrl
      - avatarSmallUrl
      - defaultAvatar
    ApiError:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
            message:
              type: string
            details: {}
          required:
          - code
          - message
      required:
      - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: 'API key from /admin/api-keys: Authorization: Bearer cef_<scope>_...'
    cookieAuth:
      type: apiKey
      in: cookie
      name: cef_session