Skip to main content
POST
Send login code
Requires X-Api-Key and X-Api-Secret headers. See Authentication for details.
This is step 1 of the current login flow. It sends a 6-digit one-time code to the user’s registered email address. Call Verify login code next with the code the user received.
The user must already be active — meaning KYC has been approved — before they can log in. Calling this for a pending or kyc_required user still sends the code, but verification will fail with User account is {status}. Complete the onboarding flow first.

Request

Response — 200 OK

The response does not indicate whether the email exists in your partner scope — this is intentional and prevents account enumeration. If the email is not registered, no code is sent, but the response still returns success: true.

Errors

Codes expire after a few minutes. If the user doesn’t complete verification in time, call this endpoint again to send a fresh code.