# run402-com Auth API

**Canonical:** https://apis.io/apis/run402-com/run402-com-auth-api/  
**Provider:** run402-com — https://apis.io/providers/run402-com/  
**Base URL:** https://api.run402.com  
**Documentation:** https://docs.run402.com/

run402-com Auth API is one of 43 APIs that [run402-com](https://apis.io/providers/run402-com/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Auth. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

User signup, login, token refresh, and logout

## Operations (47)

| Method | Path | Summary |
|---|---|---|
| GET | `/auth/v1/account/security` | Account security overview |
| GET | `/auth/v1/account/grants` | List the Bearer actor's connected MCP clients |
| POST | `/auth/v1/account/grants/revoke` | Disconnect one MCP client as the Bearer actor |
| GET | `/auth/v1/account/sessions` | List the Bearer actor's browser sessions |
| POST | `/auth/v1/account/sessions/revoke` | Revoke one browser session as the Bearer actor |
| POST | `/auth/v1/account/sign-out-everywhere` | Revoke all browser sessions as the Bearer actor |
| POST | `/auth/v1/account/password` | Set or change the Bearer actor's password |
| GET | `/auth/v1/account/passkeys` | List the Bearer actor's passkeys |
| POST | `/auth/v1/account/passkeys/remove` | Remove one of the Bearer actor's passkeys |
| GET | `/auth/v1/account/identities` | List the Bearer actor's linked OAuth identities |
| POST | `/auth/v1/account/identities/unlink` | Unlink one of the Bearer actor's OAuth identities |
| GET | `/auth/account/sessions` | List the signed-in user's browser sessions |
| POST | `/auth/account/sessions/revoke` | Revoke one of the signed-in user's sessions |
| POST | `/auth/account/sign-out-everywhere` | Revoke all of the user's sessions except the current one |
| POST | `/auth/account/password` | Set or change the signed-in user's password |
| POST | `/auth/account/passkeys/remove` | Remove one of the signed-in user's passkeys |
| POST | `/auth/account/identities/unlink` | Unlink a connected OAuth identity |
| POST | `/auth/magic-link/send` | Request hosted passwordless email sign-in |
| POST | `/auth/email-code/confirm` | Confirm a hosted email code |
| POST | `/auth/passkeys/login/options` | Hosted WebAuthn login options |
| POST | `/auth/passkeys/login/verify` | Hosted WebAuthn login verify (mints the session cookie) |
| POST | `/auth/passkeys/register/options` | Hosted WebAuthn registration options (signed-in user adds a passkey) |
| POST | `/auth/passkeys/register/verify` | Hosted WebAuthn registration verify (re-mints the session cookie) |
| POST | `/auth/v1/signup` | Create a new user |
| POST | `/auth/v1/magic-link` | Request passwordless email authentication |
| POST | `/auth/v1/admin/users` | Create or update an auth user |
| GET | `/auth/v1/admin/users/lookup` | Look up an auth user by email |
| POST | `/auth/v1/passkeys/register/options` | Create passkey registration options |
| POST | `/auth/v1/passkeys/register/verify` | Verify passkey registration |
| POST | `/auth/v1/passkeys/login/options` | Create passkey login options |
| POST | `/auth/v1/passkeys/login/verify` | Verify passkey login |
| GET | `/auth/v1/passkeys` | List passkeys |
| DELETE | `/auth/v1/passkeys/{passkey_id}` | Delete a passkey |
| POST | `/auth/v1/user/password` | Change, reset, or set password |
| PATCH | `/auth/v1/settings` | Update project auth settings |
| POST | `/auth/v1/token` | Login or refresh token |
| GET | `/auth/v1/user` | Get current user |
| POST | `/auth/v1/logout` | Logout / invalidate refresh token |
| POST | `/auth/v1/sessions/end` | End the browser session (programmatic sign-out) |
| GET | `/auth/v1/providers` | List available auth providers |
| POST | `/auth/v1/test-sessions` | Mint a deterministic tenant test session |
| GET | `/auth/v1/test-users` | List tenant test users |
| DELETE | `/auth/v1/test-users` | Delete all tenant test users |
| DELETE | `/auth/v1/test-users/{user_id}` | Delete one tenant test user |
| GET | `/auth/v1/test-emails` | List captured test emails |
| DELETE | `/auth/v1/test-emails` | Clear captured test emails |
| POST | `/auth/v1/oauth/google/start` | Start Google OAuth flow |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/run402-com/openapi/run402-com-auth-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-project-transfer-preview-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-deploy-plan-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-stable-host-resolve-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-release-inventory-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-mailbox-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-project-event-feed-page-schema.json

## Other run402-com APIs (12)

- [run402-com Admin API](https://apis.io/apis/run402-com/run402-com-admin-api/)
- [run402-com Agent API](https://apis.io/apis/run402-com/run402-com-agent-api/)
- [run402-com Agent Messaging API](https://apis.io/apis/run402-com/run402-com-agentmessaging-api/)
- [run402-com AI API](https://apis.io/apis/run402-com/run402-com-ai-api/)
- [run402-com App Repos API](https://apis.io/apis/run402-com/run402-com-app-repos-api/)
- [run402-com Apply API](https://apis.io/apis/run402-com/run402-com-apply-api/)
- [run402-com Billing API](https://apis.io/apis/run402-com/run402-com-billing-api/)
- [run402-com Buzz Control Plane API](https://apis.io/apis/run402-com/run402-com-buzz-control-plane-api/)
- [run402-com CI Federation API](https://apis.io/apis/run402-com/run402-com-ci-federation-api/)
- [run402-com Console API](https://apis.io/apis/run402-com/run402-com-console-api/)
- [run402-com Content API](https://apis.io/apis/run402-com/run402-com-content-api/)
- [run402-com Contracts API](https://apis.io/apis/run402-com/run402-com-contracts-api/)

## Tags

Auth

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/run402-com/run402-com-auth-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/run402-com/.