Consume a reset link and set a new password.

POST 
/v1/auth/password/reset

Sets the password, revokes all existing sessions (API keys untouched), marks the e-mail verified, and mints a fresh 7-day session. Password is validated before the single-use token is consumed.

No authentication is required for this endpoint.

Request

Responses

200

Password set; fresh session minted.

400

Request was malformed or failed validation. The error.code field carries the machine-readable reason; common values include invalid_request, invalid_json, invalid_order_id, invalid_instrument_id, invalid_credential_id, invalid_resolution, and operation-specific codes documented per endpoint.

429

Too many attempts inside the fixed rate-limit window (10 attempts / 5 minutes per key). Retry in a few minutes.

500

Unexpected server error. Includes a correlation_id; report it when filing a bug.