Verify the code

Checks the code the user entered and, on success, connects the user and returns the token pair to store. Completing the code is the authorization — there is no separate approval screen.

The returned access_token is the user's connection token: it acts on behalf of this user (send it as the bearer token to the MCP server to create cards, check balances, and shop as them). It is not the platform token — the endpoints in this reference keep using your platform access token and name the user with user_id.

A code can be verified once: a second verify of the same attempt returns invalid_connect_attempt.

In sandbox the code is always 111111.