---
title: "Start CLI device login"
method: POST
path: "/v1/auth/device/start"
tags: ["Auth"]
---

# Start CLI device login

`POST /v1/auth/device/start`

RFC-8628-style device authorization for CLI/agents. No auth required. Optional `expected_email` pre-selects the Google account and drives a mismatch warning on approval.

## Request body

- object
  - `expected_email` string, email — Email the user expects to sign in as (e.g. invite address).

## Response `201`

Pending device authorization

- object
  - `device_code` string, required — Secret held by the CLI for polling.
  - `user_code` string, required — Short code shown in the browser (e.g. XXXX-XXXX).
  - `verification_uri` string, uri, required
  - `verification_uri_complete` string, uri, required
  - `interval` integer, required — Minimum poll interval in seconds.
  - `expires_in` integer, required — Seconds until the code expires.

---

[API](https://skmtc.net/shareout/apis/shareout-rest-api.md) · [All operations](https://skmtc.net/shareout/apis/shareout-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/shareout/shareout-rest-api/revisions/804359ead65a/schema)