---
title: "Redeem Setup Token"
method: POST
path: "/api/v1/auth/setup-token/redeem"
tags: ["auth"]
---

# Redeem Setup Token

`POST /api/v1/auth/setup-token/redeem`

Consume an account-setup token and set the account's password.

Rate Limited: 5 requests per minute per IP address.

Does not require authentication — the token is the credential. Each failure
mode gets its own status so the page can tell the user what to do next;
none of them names the account, so a guessed token reveals nothing. The
status table lives with the exceptions rather than as a ladder here, so a
new refusal cannot reach the client as an unmapped 500.

## Request body

- SetupTokenRedeemRequest — Request model for redeeming an account-setup token.
  - `token` string, required
  - `password` string, required

## Response `204`

Successful Response

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/maia-analytics/apis/maia-api.md) · [All operations](https://skmtc.net/maia-analytics/apis/maia-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/maia-analytics/maia-api/revisions/964b64b122c8/schema)