Skip to main content
POST
Creates a new user account and emails a verification code. No tokens are issued at this step — the account must verify its email before it can log in. Public endpoint, rate-limited to 50 requests per 15 minutes per IP.

Body

string
required
Account holder’s full name.
string
required
A valid, unused email address.
string
required
At least 8 characters and must contain a lowercase letter, an uppercase letter, a digit, and a special character.
string
required
Must exactly match password.
string
Optional phone number.
string
Optional company name.
A six-digit verification code is sent to the supplied email. The account stays unverified until that code is confirmed, and login is blocked until then.