List sign-in methods
Which doors THIS deployment offers (password, magic link, email OTP, and the configured OAuth providers), plus whether each one may create an account. Unauthenticated so a sign-in page can render before anyone signs in. Describes configuration only — never anything about a particular account, which is what would enable enumeration.
Path Parameters
Your app's unique id. Find it in the console under the app's Settings, or in the URL of any app page.
uuidResponse Body
application/json
application/json
curl -X GET "https://example.com/497f6eca-6276-4993-bfeb-53cbbbba6f08/auth/methods"{ "password": true, "magicLink": true, "emailOtp": true, "oauth": [ "string" ], "signup": { "magicLink": true, "emailOtp": true, "oauth": true }}Sign in with a password
Log a user in
Send a magic link
Sends a single-use, short-lived sign-in link. ALWAYS returns the same generic 200 whether or not the address has an account — the response is the enumeration channel, so it carries no signal. Sign-up via magic link is off unless AUTH_MAGIC_LINK_ALLOW_SIGNUP is set.