# Medusa Auth API

**Canonical:** https://apis.io/apis/medusa/medusa-auth-api/  
**Provider:** Medusa — https://apis.io/providers/medusa/  
**Base URL:** https://{medusa-backend-domain}  
**Documentation:** https://docs.medusajs.com/api/store

Medusa Auth API is one of 82 APIs that [Medusa](https://apis.io/providers/medusa/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

Auth API routes allow you to manage an admin user's authentication.

## Operations (19)

| Method | Path | Summary |
|---|---|---|
| DELETE | `/auth/mfa/factors/{id}` | Disable a Multi-Factor Authentication (MFA) Factor |
| POST | `/auth/session` | Set Authentication Session |
| DELETE | `/auth/session` | Delete Authentication Session |
| POST | `/auth/token/refresh` | Refresh Authentication Token |
| GET | `/auth/user/providers` | List Auth Providers for Admin Users |
| POST | `/auth/user/{auth_provider}` | Authenticate User |
| POST | `/auth/user/{auth_provider}/callback` | Validate Authentication Callback |
| POST | `/auth/user/{auth_provider}/register` | Retrieve Registration JWT Token |
| POST | `/auth/user/{auth_provider}/reset-password` | Generate Reset Password Token for Admin User |
| POST | `/auth/user/{auth_provider}/update` | Reset an Admin User's Password |
| POST | `/auth/customer/emailpass/verification/confirm` | Verify the Customer's Email |
| GET | `/auth/customer/providers` | List Auth Providers for Customers |
| POST | `/auth/customer/{auth_provider}` | Authenticate Customer |
| POST | `/auth/customer/{auth_provider}/callback` | Validate Authentication Callback |
| POST | `/auth/customer/{auth_provider}/register` | Retrieve Registration JWT Token |
| POST | `/auth/customer/{auth_provider}/reset-password` | Generate Reset Password Token for Customer |
| POST | `/auth/customer/{auth_provider}/update` | Reset a Customer's Password |
| POST | `/auth/verification/confirm` | Confirm Customer Verification |
| POST | `/auth/verification/request` | Request Customer Verification |

## Machine-readable artifacts (9)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/medusa/refs/heads/main/openapi/medusa-auth-api-openapi.yml
- **Documentation** — https://docs.medusajs.com/api/store
- **APIReference** — https://docs.medusajs.com/api/store
- **OpenAPI Source** — https://raw.githubusercontent.com/medusajs/medusa/develop/www/apps/api-reference/specs/store/openapi.full.yaml
- **Authentication** — https://docs.medusajs.com/api/store#authentication
- **Documentation** — https://docs.medusajs.com/api/admin
- **APIReference** — https://docs.medusajs.com/api/admin
- **OpenAPI Source** — https://raw.githubusercontent.com/medusajs/medusa/develop/www/apps/api-reference/specs/admin/openapi.full.yaml
- **Authentication** — https://docs.medusajs.com/api/admin#authentication

## Other Medusa APIs (12)

- [Medusa GraphQL API](https://apis.io/apis/medusa/medusa-graphql-api/)
- [Medusa MCP Remote Server](https://apis.io/apis/medusa/medusa-mcp-server/)
- [Medusa Api Keys API](https://apis.io/apis/medusa/medusa-api-keys-api/)
- [Medusa [auth Provider] API](https://apis.io/apis/medusa/medusa-auth-provider-api/)
- [Medusa Campaigns API](https://apis.io/apis/medusa/medusa-campaigns-api/)
- [Medusa Carts API](https://apis.io/apis/medusa/medusa-carts-api/)
- [Medusa Claims API](https://apis.io/apis/medusa/medusa-claims-api/)
- [Medusa Collections API](https://apis.io/apis/medusa/medusa-collections-api/)
- [Medusa Currencies API](https://apis.io/apis/medusa/medusa-currencies-api/)
- [Medusa Customer Groups API](https://apis.io/apis/medusa/medusa-customer-groups-api/)
- [Medusa Customers API](https://apis.io/apis/medusa/medusa-customers-api/)
- [Medusa Draft Orders API](https://apis.io/apis/medusa/medusa-draft-orders-api/)

## Tags

Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/medusa/medusa-auth-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/medusa/.