Exchange a magic link token for a session
Consumes the one-time portal redirect (magic link) token emailed during bot signup and returns an API session. The token is a UUIDv7 that encodes its creation time; it expires after a configurable validity window (15 minutes by default) and is cleared on first use. Although the action creates a session, the route uses the GET verb because it is opened from an email link. On first use the account is also initialized. For bot signup (freemium) accounts the response is a minimal envelope containing only the api_v2_token; accounts that are permitted to use magic links but are not freemium accounts may instead receive an extended session payload when additional steps (such as two-factor authentication or identity verification) are required. This endpoint is public; the magic link token in the query string is the credential.
Query Parameters
Email address associated with the magic link token.
"agent-owner@example.com"
Single-use portal redirect (magic link) token, a UUIDv7 sent to the account owner's email.
"01890a7e-e2f7-7c3d-8dbb-9a2c5f3d1e0b"
Response
Session created. Bot signup accounts receive a minimal token envelope.