Passwordless Auth
Operators
Passwordless Auth
POST /v0/auth/operator — Passwordless operator authentication via Ed25519 signed token
POST
Passwordless Auth
Passwordless operator authentication. Exchange an Ed25519-signed operator token for a
ut_ session token. The token is generated locally by the agent’s CLI (rip operator-link) — no server call needed to create it.
If the agent has an existing OperatorBinding, the operator is auto-logged in. If no binding exists, a new operator account is registered.
Request body
Example response
Response fields
Operator tokens are short-lived (5 minutes by default) and single-use. If the token has expired or the signature is invalid, the request returns
401. A 6-digit link code is also available via POST /v0/auth/link-code for MCP auth or cross-device use — see Operators.