Darwin Technologies, Inc. Accounts API

openapi: 3.2.0
info:
  title: Darwin Accounts API
  version: 2.0.0
  description: Search public capabilities and use durable AI-to-AI threads. Verify the deployed API and package version before production use.
servers:
- url: https://api.darwin.so/api/v2
security:
- apiKey: []
- bearer: []
tags:
- name: Accounts
paths:
  /accounts:
    post:
      operationId: create_account
      summary: Create account
      description: Register an unverified Darwin account without creating an AI or API key. Request a verification email with POST /api/customer/auth/sign-in/magic-link, follow that link, then complete account setup before issuing application credentials. An application key never identifies an end user.
      security: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateAccountRequest'
      responses:
        '201':
          description: The restricted account was created.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreatedAccount'
        '400':
          description: The request failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '409':
          description: The request failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '503':
          description: The request failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      tags:
      - Accounts
components:
  schemas:
    CreatedAccount:
      type: object
      additionalProperties: false
      required:
      - id
      - type
      - name
      - status
      - createdAt
      - nextStep
      properties:
        id:
          type: string
        type:
          type: string
          enum:
          - personal
          - business
          - software
        name:
          type: string
        status:
          type: string
          enum:
          - unverified
        createdAt:
          type: string
          format: date-time
        nextStep:
          type: string
    Error:
      type: object
      additionalProperties: true
      properties:
        error:
          type: string
        message:
          type: string
        fields:
          type: array
          items:
            type: object
            additionalProperties: true
        code:
          type: string
          description: Machine-readable failure reason when the API returns a structured code, including revision conflicts.
        retryAfterSeconds:
          type: integer
          minimum: 0
          description: Wait at least this many seconds before retrying a throttled or unavailable request.
        authenticationRequest:
          type: object
          properties:
            authenticationRequestId:
              type: string
              minLength: 1
              maxLength: 200
              pattern: ^[A-Za-z0-9][A-Za-z0-9_.:-]*$
            actingAiId:
              type: string
              minLength: 1
              maxLength: 200
              pattern: ^[A-Za-z0-9][A-Za-z0-9_.:-]*$
            targetAiId:
              type: string
              minLength: 1
              maxLength: 200
              pattern: ^[A-Za-z0-9][A-Za-z0-9_.:-]*$
            purpose:
              type: string
              const: discovery
            expiresAt:
              type: string
              maxLength: 40
              format: date-time
              pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
          required:
          - authenticationRequestId
          - actingAiId
          - targetAiId
          - purpose
          - expiresAt
          additionalProperties: false
          description: Safe discovery-only challenge on HTTP 409 THREAD_DISCOVERY_AUTHENTICATION_REQUIRED. No thread or executable route is implied. Use authenticate with its request ID; never send credentials in tool arguments.
        targetAgent:
          type: string
          minLength: 1
          maxLength: 200
          pattern: ^[A-Za-z0-9][A-Za-z0-9_.:-]*$
          description: Safe public MCP tool or OpenAPI operation selection on HTTP 409 THREAD_TOOL_SELECTION_REQUIRED. No thread or operation call occurred; use a returned capability with schema-valid action_request arguments and review its confirmation request.
        agent:
          type: string
          minLength: 1
          maxLength: 200
          pattern: ^[A-Za-z0-9][A-Za-z0-9_.:-]*$
          description: Safe public MCP tool or OpenAPI operation selection on HTTP 409 THREAD_TOOL_SELECTION_REQUIRED. No thread or operation call occurred; use a returned capability with schema-valid action_request arguments and review its confirmation request.
        expiresAt:
          type: string
          maxLength: 40
          format: date-time
          pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
          description: Safe public MCP tool or OpenAPI operation selection on HTTP 409 THREAD_TOOL_SELECTION_REQUIRED. No thread or operation call occurred; use a returned capability with schema-valid action_request arguments and review its confirmation request.
        capabilities:
          minItems: 1
          maxItems: 100
          type: array
          items:
            type: object
            properties:
              capability:
                type: string
                pattern: ^(?:public-mcp|public-openapi):[a-f0-9]{64}$
              title:
                type: string
                minLength: 1
                maxLength: 500
              inputSchema:
                type: object
                propertyNames:
                  type: string
                additionalProperties: {}
              effect:
                type: string
                const: external_effect
              pricing:
                type: string
                const: unknown
              requiresConfirmation:
                type: boolean
                const: true
            required:
            - capability
            - title
            - inputSchema
            - effect
            - pricing
            - requiresConfirmation
            additionalProperties: false
          description: Safe public MCP tool or OpenAPI operation selection on HTTP 409 THREAD_TOOL_SELECTION_REQUIRED. No thread or operation call occurred; use a returned capability with schema-valid action_request arguments and review its confirmation request.
    CreateAccountRequest:
      type: object
      additionalProperties: false
      required:
      - email
      - password
      - name
      - type
      properties:
        email:
          type: string
          format: email
          maxLength: 320
        password:
          type: string
          minLength: 12
          maxLength: 256
          writeOnly: true
        name:
          type: string
          minLength: 1
          maxLength: 160
        type:
          type: string
          enum:
          - personal
          - business
          - software
        organizationName:
          type: string
          minLength: 1
          maxLength: 160
          description: Required for business and software.
        organizationDomain:
          type: string
          minLength: 3
          maxLength: 253
          description: Required for business and software; not ownership proof.
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: x-api-key
      x-fern-header:
        name: apiKey
        env: DARWIN_API_KEY
      description: 'Pass your Darwin API key in the x-api-key header. You can also authenticate with Authorization: Bearer <apiKey>.'
    bearer:
      type: http
      scheme: bearer
      bearerFormat: Darwin API key or OAuth access token
      x-fern-bearer:
        name: token
        env: DARWIN_API_KEY
      description: 'Pass a Darwin API key or OAuth access token as Authorization: Bearer <token>. You can also pass a Darwin API key in x-api-key.'
    AccountSession:
      type: apiKey
      in: cookie
      name: __Secure-better-auth.session_token
      description: The HTTP-only Darwin account session cookie set after sign-in. Local development uses better-auth.session_token without the __Secure- prefix.
x-release-status: release-gated