API reference / Accounts

post/v2/accounts/verify-email

Confirm an email address

Operation
verifyEmail
Authentication
None — public

Exchanges the token from the confirmation email for a confirmed address — and for the applications that address had already started, which are returned as `linked_applications` and belong to the account from then on. The link is stateless and not single-use: opening it twice re-confirms and re-runs the (idempotent) link, and it never signs anyone in — a link that arrives by email must not become a standing credential.

Request

Body

tokenstringrequired

Responses

200Confirmed. The account, plus the applications this address had started.
userAccountUserrequired
linked_applicationsobject[]required
400The request body or query failed validation.
errorobjectrequired
401The link is not valid, has expired, or matches no account.
errorobjectrequired

Example

curl
curl -X POST https://api.haavisa.com/v2/accounts/verify-email \
  -H "Content-Type: application/json" \
  -d '{
    "token": "<token>"
  }'

More in Accounts

Something unclear? The eligibility guide explains the model behind the answers; the errors guide covers the envelope.