Dropto

Dropto Auth API

Signing in: the browser's redirect through Google, and the two flows a command line uses — one that can open a browser, and one that shows a code to approve from another machine. Sessions are cookies; scripts use a token instead.

GitHub OpenAPI

Operations 41

GET /api/auth/2fa Describes the code step this browser holds, for the page to name whose it is #
POST /api/auth/2fa/recovery Finishes a sign-in with one of the recovery codes #
POST /api/auth/2fa/verify Finishes a sign-in with a code from the app #
POST /api/auth/cli/authorize Creates the one-time code a waiting command line exchanges for a token #
POST /api/auth/cli/device Opens a device sign-in for a command line that cannot receive a browser redirect #
POST /api/auth/cli/device/approve Approves or refuses a device sign-in, deciding which account its token speaks… #
POST /api/auth/cli/device/find Reports what a device sign-in code is asking for, so it can be approved… #
POST /api/auth/cli/device/token Reports whether a device sign-in has been approved, and returns the token once… #
POST /api/auth/cli/token Exchanges a one-time code and its verifier for an access token #
GET /api/auth/config Reads the OAuth client id and the Turnstile site key. #
POST /api/auth/deletion/cancel Redeems the link and restores the person and the accounts going with them #
GET /api/auth/google Redirects to Google's consent screen; returnTo is where the browser lands after… #
POST /api/auth/google/one-tap Verifies the ID token, upserts the user, and signs the cookie in #
POST /api/auth/login Checks the password and, when it matches a confirmed account, signs the person… #
POST /api/auth/logout Signs the caller out of the cookie scheme. Safe to call with no session #
POST /api/auth/password/forgot Mails a reset link when the address has an account #
POST /api/auth/password/reset Redeems the link, sets the password, and signs the person in #
POST /api/auth/signup Creates the account, or mails the right thing about an existing one #
POST /api/auth/verify Redeems the link and does what its purpose says #
POST /api/auth/verify/resend Checks the password and, for an unconfirmed account, mails a new link #
DELETE /api/me Schedules the deletion, takes everything offline, and signs this browser out #
GET /api/me Reads the signed-in user, their plan and usage #
PATCH /api/me Sets or clears the signed-in person's name #
DELETE /api/me/2fa Checks the proof and forgets the person's two-factor #
POST /api/me/2fa/enable Checks the code, turns two-factor on, and issues the recovery codes #
POST /api/me/2fa/recovery-codes Makes a new set #
POST /api/me/2fa/start Makes and stores a new unconfirmed key #
DELETE /api/me/devices Forgets every browser, this one included #
GET /api/me/devices Lists the signed-in person's trusted browsers #
DELETE /api/me/devices/{id} Forgets one browser #
POST /api/me/email Checks who is asking, then issues the confirmation link and queues both mails #
DELETE /api/me/email/pending Retires every change of address still open for the signed-in person #
GET /api/me/export Gathers the person's data and streams it as a file to save #
DELETE /api/me/google Clears the Google subject from the signed-in person's row #
PUT /api/me/onboarding Stores the answers, and marks the row finished when every question has one #
POST /api/me/password Checks the current password, sets the new one, and re-issues this browser's… #
PUT /api/me/product-email Gives or withdraws consent to product email #
GET /api/me/profile Reads the signed-in person: name, address, and how they sign in #
POST /api/me/sessions/revoke Rotates the stamp and clears this response's cookie #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/dropto-run/openapi/dropto-run-auth-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/dropto-run/json-schema/dropto-run-site-detail-schema.json
📊
JSONSchema
https://artifacts.apis.io/dropto-run/json-schema/dropto-run-update-site-settings-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/dropto-run/json-schema/dropto-run-site-domain-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/dropto-run/json-schema/dropto-run-me-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/dropto-run/json-schema/dropto-run-site-traffic-overview-schema.json
📊
JSONSchema
https://artifacts.apis.io/dropto-run/json-schema/dropto-run-site-settings-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/dropto-run:dropto-run-auth-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

dropto-run-auth-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Drop2Run.Api | v1 Auth API
  version: 1.0.0
  description: 'Signing in: the browser''s redirect through Google, and the two flows a command line uses — one that can open a browser, and one that shows a code to approve from another machine. Sessions are cookies; scripts use a token instead.'
servers:
- description: Production
  url: https://dropto.run
tags:


# --- truncated at 32 KB (108 KB total) ---
# Full source: https://artifacts.apis.io/dropto-run/openapi/dropto-run-auth-api-openapi.yml