POST/auth/device/token
Poll a device login and mint the API key on approval
UNAUTHENTICATED. Poll every 5 s with the `device_code`. Non-terminal states return 200 with `status` of `pending` or `slow_down` (includes `interval`). Terminal: `expired`, `denied`, or `authorized`. On the first poll after browser approval the response carries the plaintext `api_key` (scopes read/write/ai, no expiry) EXACTLY ONCE — persist it immediately; subsequent polls return `expired`.
Guides: Authentication guide · API key scopes
This endpoint accepts a JSON request body. See the auth guide for a worked example.
Responses
- 200Poll result
- 400
- 500