---
title: "Request a magic link for login"
method: POST
path: "/api/v1/auth/login/link"
tags: ["auth"]
---

# Request a magic link for login

`POST /api/v1/auth/login/link`

Sends a magic link to the given email address so an existing user can sign in
without a password. The user clicks the link in their email and is redirected to
`redirect_uri` with a token; pass that token to `/auth/verify_link` to obtain
session tokens.

If no account exists for the email, the endpoint still returns success to prevent
email enumeration — no link is sent in that case. Both `email` and `redirect_uri`
are required. Requests are rate-limited per IP (10 per minute) and per email-IP pair
(3 per minute) — exceeding either limit returns HTTP 429. Returns HTTP 204 on success.

## Request body

- object
  - `email` string — Email address of the account to send the magic link to.
  - `redirect_uri` string — URL the user is redirected to after clicking the magic link. The token is appended as a query parameter.

## Response `204`

No content

## Other responses

- `400` — Missing email or redirect_uri
- `429` — Rate limited

---

[API](https://skmtc.net/archastro/apis/archastro-platform-api.md) · [All operations](https://skmtc.net/archastro/apis/archastro-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/archastro/archastro-platform-api/revisions/a8772b442f86/schema)