---
title: "Finalize Email Magic Link Challenge"
method: POST
path: "/verify/email-magic-link/finalize"
tags: ["Email Magic Link"]
---

# Finalize Email Magic Link Challenge

`POST /verify/email-magic-link/finalize`

The email magic link challenge is verified when the user clicks on the link sent to their email. Use this endpoint to finalize the challenge, checking if the user has clicked on the magic link (e.g. via polling).

## Request body

- object
  - `challengeId` string — The ID obtained when starting the challenge.

## Response `200`

OK

- object
  - `isVerified` boolean — True if the email magic link was clicked by the user.
  - `accessToken` string — A new short-term token with scopes to manage authenticators (e.g. add secondary authenticators, remove authenticators, view or regenerate recovery codes). Only present if the challenge succeeded.

## Other responses

- `400` — Invalid Request
- `401` — Unauthorized
- `404` — Not Found

---

[API](https://skmtc.net/authsignal/apis/call-connect-api.md) · [All operations](https://skmtc.net/authsignal/apis/call-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authsignal/call-connect-api/versions/5604d744e3ad/schema)