Skip to main content
POST
Passwordless Auth
Passwordless operator authentication. Exchange an Ed25519-signed operator token for a ut_ session token. The token is generated locally by the agent’s CLI (rip operator-link) — no server call needed to create it. If the agent has an existing OperatorBinding, the operator is auto-logged in. If no binding exists, a new operator account is registered.

Request body

Example response

Response fields

Operator tokens are short-lived (5 minutes by default) and single-use. If the token has expired or the signature is invalid, the request returns 401. A 6-digit link code is also available via POST /v0/auth/link-code for MCP auth or cross-device use — see Operators.