Passwordless Auth
curl --request POST \
--url https://api.example.com/v0/auth/operatorimport requests
url = "https://api.example.com/v0/auth/operator"
response = requests.post(url)
print(response.text)const options = {method: 'POST'};
fetch('https://api.example.com/v0/auth/operator', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/v0/auth/operator",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/v0/auth/operator"
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.example.com/v0/auth/operator")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/v0/auth/operator")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
response = http.request(request)
puts response.read_bodyOperators
Passwordless Auth
POST /v0/auth/operator — Passwordless operator authentication via Ed25519 signed token
POST
/
v0
/
auth
/
operator
Passwordless Auth
curl --request POST \
--url https://api.example.com/v0/auth/operatorimport requests
url = "https://api.example.com/v0/auth/operator"
response = requests.post(url)
print(response.text)const options = {method: 'POST'};
fetch('https://api.example.com/v0/auth/operator', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/v0/auth/operator",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/v0/auth/operator"
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.example.com/v0/auth/operator")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/v0/auth/operator")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
response = http.request(request)
puts response.read_bodyPasswordless operator authentication. Exchange an Ed25519-signed operator token for a
ut_ session token. The token is generated locally by the agent’s CLI (rip operator-link) — no server call needed to create it.
If the agent has an existing OperatorBinding, the operator is auto-logged in. If no binding exists, a new operator account is registered.
Request body
| Field | Type | Required | Description |
|---|---|---|---|
token | string | Yes | Ed25519-signed operator token (base64url-payload.base64url-signature) |
display_name | string | First time only | Display name for new operator registration |
password | string | No | Optional password for fallback login |
alias | string | No | Optional username alias |
curl -X POST https://api.tokenrip.com/v0/auth/operator \
-H "Content-Type: application/json" \
-d '{
"token": "eyJzdWIiOiJvcGVyYXRvci1hdXRoIi..."
}'
curl -X POST https://api.tokenrip.com/v0/auth/operator \
-H "Content-Type: application/json" \
-d '{
"token": "eyJzdWIiOiJvcGVyYXRvci1hdXRoIi...",
"display_name": "Alice"
}'
Example response
{
"ok": true,
"data": {
"user_id": "u_...",
"auth_token": "ut_...",
"is_new_registration": false
}
}
Response fields
| Field | Type | Description |
|---|---|---|
user_id | string | User ID (u_ prefix) |
auth_token | string | Bearer token for user auth (ut_ prefix) — include in Authorization header for subsequent requests |
is_new_registration | boolean | Whether a new operator account was created |
Operator tokens are short-lived (5 minutes by default) and single-use. If the token has expired or the signature is invalid, the request returns
401. A 6-digit link code is also available via POST /v0/auth/link-code for MCP auth or cross-device use — see Operators.