Auth

📄️ Trade a still-valid storefront token for a fresh one (sliding session).

Trade a still-valid storefront token for a fresh one (sliding session).

📄️ Public storefront capability flags (e.g. self-signup enabled).

Public storefront capability flags (e.g. self-signup enabled).

📄️ Assisted signup for the storefront assistant: creates the company and a join link emailed to the buyer, who sets their own password there. Takes no password (chat transcripts are stored) and is gated by storefront.allow_self_signup.

Assisted signup for the storefront assistant: creates the company and a join link emailed to the buyer, who sets their own password there. Takes no password (chat transcripts are stored) and is gated by storefront.allow_self_signup.

📄️ Public B2C self-service signup (gated per org by storefront.allow_self_signup). The account activates via the emailed verification link before the first sign-in.

Public B2C self-service signup (gated per org by storefront.allow_self_signup). The account activates via the emailed verification link before the first sign-in.

📄️ Start a guest checkout — provisions a lightweight, pre-verified buyer account (no password prompt) and returns a storefront token so the shopper can complete the purchase in the same session. Gated per org by storefront.allow_guest_checkout. If the email already belongs to an account, returns 409 (sign in instead).

Start a guest checkout — provisions a lightweight, pre-verified buyer account (no password prompt) and returns a storefront token so the shopper can complete the purchase in the same session. Gated per org by storefront.allow_guest_checkout. If the email already belongs to an account, returns 409 (sign in instead).

📄️ Activate a self-registered buyer account from the emailed verification token.

Activate a self-registered buyer account from the emailed verification token.

📄️ Re-issue the activation link for an unverified buyer. Always 200 (no account enumeration); outstanding tokens are retired.

Re-issue the activation link for an unverified buyer. Always 200 (no account enumeration); outstanding tokens are retired.

Auth

📄️ adminLogin

📄️ storefrontLogin

📄️ Trade a still-valid storefront token for a fresh one (sliding session).

📄️ Public storefront capability flags (e.g. self-signup enabled).

📄️ Assisted signup for the storefront assistant: creates the company and a join link emailed to the buyer, who sets their own password there. Takes no password (chat transcripts are stored) and is gated by storefront.allow_self_signup.

📄️ Public B2C self-service signup (gated per org by storefront.allow_self_signup). The account activates via the emailed verification link before the first sign-in.

📄️ Activate a self-registered buyer account from the emailed verification token.

📄️ Re-issue the activation link for an unverified buyer. Always 200 (no account enumeration); outstanding tokens are retired.

📄️ Start a buyer password reset. Always 200 (no account enumeration); the reset link is emailed.

📄️ Complete a buyer password reset from the emailed token (single-use, 1h expiry).

📄️ Resolve an invite link so the join page can show the company being joined.

📄️ Self-register a buyer via an invite link and sign them in.

📄️ AI agents this buyer has connected via OAuth, with what each may do.

📄️ Disconnect an agent. Its tokens stop working immediately.