---
title: "Agent auth login (with MFA branch)"
method: POST
path: "/agent/v1/auth/login"
tags: ["Agent Sandbox"]
---

# Agent auth login (with MFA branch)

`POST /agent/v1/auth/login`

Returns a session for normal accounts or an MFA challenge for accounts with email matching '+mfa@'. Use '+wrong@' or '+locked@' suffixes to trigger 401 branches.

## Request body

- object
  - `email` string, email, required
  - `password` string, required

## Response `200`

Session created or MFA challenge

## Other responses

- `400` — Missing fields
- `401` — Invalid credentials or account locked
- `422` — Validation error
- `429` — Rate limited

---

[API](https://skmtc.net/reqres/apis/reqres-api.md) · [All operations](https://skmtc.net/reqres/apis/reqres-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/reqres/reqres-api/revisions/e5ced6578853/schema)