API referenceSign-in and account
Get your sign-in methods
GET
Returns how the signed-in person can sign in: password, authenticator app (TOTP), recovery codes left, passkeys and a linked GitHub login.
Any signed-in caller. Not available to MCP clients or the assistant.
cookie
seylo_session<token>Success.
application/json- response
passwordSet*booleantotp*recoveryCodesLeft*integerRange
0 <= valuepasskeys*array<>passkeysAvailable*booleangithub*|nullgithubAvailable*booleancurl -X GET 'https://example.com/api/v1/auth.security'Example Response
{ "passwordSet": true, "totp": { "enabled": true, "confirmedAt": "2019-08-24T14:15:22Z" }, "recoveryCodesLeft": 0, "passkeys": [ { "id": "string", "name": "string", "createdAt": "2019-08-24T14:15:22Z", "lastUsedAt": "2019-08-24T14:15:22Z" } ], "passkeysAvailable": true, "github": { "login": "string", "repoAccess": true, "linkedAt": "2019-08-24T14:15:22Z" }, "githubAvailable": true}Sign out one session POST
Ends one of your own sessions, for example a browser you no longer use. Ending the current one is the same as signing out. Any signed-in caller. Not available to MCP clients or the assistant.
Turn on the authenticator app POST
Checks a code from the newly enrolled authenticator, turns 2FA on and returns 10 recovery codes. They are shown once; store them somewhere safe. Any signed-in caller. Not available to MCP clients or the assistant.