run402-com Auth API

User signup, login, token refresh, and logout

Operations 47

GET /auth/v1/account/security Account security overview #
GET /auth/v1/account/grants List the Bearer actor's connected MCP clients #
POST /auth/v1/account/grants/revoke Disconnect one MCP client as the Bearer actor #
GET /auth/v1/account/sessions List the Bearer actor's browser sessions #
POST /auth/v1/account/sessions/revoke Revoke one browser session as the Bearer actor #
POST /auth/v1/account/sign-out-everywhere Revoke all browser sessions as the Bearer actor #
POST /auth/v1/account/password Set or change the Bearer actor's password #
GET /auth/v1/account/passkeys List the Bearer actor's passkeys #
POST /auth/v1/account/passkeys/remove Remove one of the Bearer actor's passkeys #
GET /auth/v1/account/identities List the Bearer actor's linked OAuth identities #
POST /auth/v1/account/identities/unlink Unlink one of the Bearer actor's OAuth identities #
GET /auth/account/sessions List the signed-in user's browser sessions #
POST /auth/account/sessions/revoke Revoke one of the signed-in user's sessions #
POST /auth/account/sign-out-everywhere Revoke all of the user's sessions except the current one #
POST /auth/account/password Set or change the signed-in user's password #
POST /auth/account/passkeys/remove Remove one of the signed-in user's passkeys #
POST /auth/account/identities/unlink Unlink a connected OAuth identity #
POST /auth/magic-link/send Request hosted passwordless email sign-in #
POST /auth/email-code/confirm Confirm a hosted email code #
POST /auth/passkeys/login/options Hosted WebAuthn login options #
POST /auth/passkeys/login/verify Hosted WebAuthn login verify (mints the session cookie) #
POST /auth/passkeys/register/options Hosted WebAuthn registration options (signed-in user adds a passkey) #
POST /auth/passkeys/register/verify Hosted WebAuthn registration verify (re-mints the session cookie) #
POST /auth/v1/signup Create a new user #
POST /auth/v1/admin/users Create or update an auth user #
GET /auth/v1/admin/users/lookup Look up an auth user by email #
POST /auth/v1/passkeys/register/options Create passkey registration options #
POST /auth/v1/passkeys/register/verify Verify passkey registration #
POST /auth/v1/passkeys/login/options Create passkey login options #
POST /auth/v1/passkeys/login/verify Verify passkey login #
GET /auth/v1/passkeys List passkeys #
DELETE /auth/v1/passkeys/{passkey_id} Delete a passkey #
POST /auth/v1/user/password Change, reset, or set password #
PATCH /auth/v1/settings Update project auth settings #
POST /auth/v1/token Login or refresh token #
GET /auth/v1/user Get current user #
POST /auth/v1/logout Logout / invalidate refresh token #
POST /auth/v1/sessions/end End the browser session (programmatic sign-out) #
GET /auth/v1/providers List available auth providers #
POST /auth/v1/test-sessions Mint a deterministic tenant test session #
GET /auth/v1/test-users List tenant test users #
DELETE /auth/v1/test-users Delete all tenant test users #
DELETE /auth/v1/test-users/{user_id} Delete one tenant test user #
GET /auth/v1/test-emails List captured test emails #
DELETE /auth/v1/test-emails Clear captured test emails #
POST /auth/v1/oauth/google/start Start Google OAuth flow #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/run402-com:run402-com-auth-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

run402-com-auth-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Run402 Auth API
  version: 2.0.0
  description: 'Full-stack infrastructure for AI agents. Postgres, REST API, auth, file storage, static site hosting, serverless functions. Tier payments and image generation use the shared payment engine: x402 (USDC on Base), MPP on Tempo (pathUSD), and the draft-pinned MPP Lightning charge profile (sats, Bitcoin mainnet) for authenticated tier purchases and image generation.'
  contact:
    name: Run402
    url: https://run402.com
  guidance: 'Run402 is a pay-per-use backend for AI agents: Postgres databases, static hosting, serverless functions, and image generation. The shared payment engine supports x402 (USDC on Base), MPP on Tempo (pathUSD), and the exact Run402 MPP Lightning charge profile on Bitcoin mainnet (sats).


    ## Quick start

    1. Install the CLI: npm install -g run402@latest

    2. Create an allowance: run402 init

    3. Set the prototype tier (FREE, testnet USDC): run402 tier set prototype

    4. Provision a project: run402 projects provision --name "my-app"

    5. Deploy: run402 deploy --manifest app.json


    ## Payment model

    - Tiers (prototype $0.10 testnet, hobby $5, team $20; hobby and team are 30-day prepaid leases) unlock all platform features.

    - Image generation is $0.03 per call (x402, MPP on Tempo, or MPP Lightning micropayment).

    - Auth-only endpoints (projects, deploys, messages) require SIWX wallet identity but no payment.


    ## Auth

    - x402 endpoints: include a payment header (handled automatically by the CLI or x402 client libraries).

    - Explicit MPP Lightning tier requests require the exact Run402 profile, ordered Accept-Payment preferences, one principal credential, a stable Idempotency-Key, and buyer-side USD/native/fee limits.

    - SIWX endpoints: sign a CAIP-122 message with your wallet.

    - REST API: use the project''s anon_key or service_key as the apikey header.


    ## Client metadata

    - Recent Node SDK/CLI clients may send Run402-Client: surface="cli", version="3.7.14", sdk="3.7.14". It is advisory, bounded, never used for auth/billing/trust, and not browser-CORS-enabled yet.


    ## Docs

    - Full CLI docs: https://run402.com/llms-cli.txt

    - API docs: https://run402.com/llms.txt'
servers:
- url: https://api.run402.com
  description: Production
tags:


# --- truncated at 32 KB (98 KB total) ---
# Full source: https://artifacts.apis.io/run402-com/openapi/run402-com-auth-api-openapi.yml