POST
Log in

Body

application/json
email
string<email>
required
password
string<password>
required

Response

Authenticated.

An authenticated developer session. Send token as Authorization: Bearer <token> on every developer endpoint.

Tokens last 7 days. POST /v1/auth/refresh issues a new one and immediately invalidates the token used to request it, so a client holds exactly one valid token at a time.

token
string
required

JWT bearer token. Store it where a password would go, not in logs.

Example:

"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

token_type
string
required
Allowed value: "Bearer"
expires_at
string<date-time>
required

7 days after issue.

Example:

"2026-09-28T14:00:00Z"

account
object
required

A developer account. One human, one login, one Stripe customer.