Browse the API reference

User Login

post/v1/auth/login

Part of Auth.

Returns a JWT token on success. IP-based progressive delays apply after repeated failures.

Authentication

This operation does not require an API key.

Request body

Required, application/json.

Field	Type	Description
`email`required	string (email)	User's email address
`password`required	string	User's password

Example request

curl

curl -X POST "https://api.robosystems.ai/v1/auth/login" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "user@example.com",
  "password": "string"
}'

Responses

200 Successful Response

Field	Type	Description
`user`required	object	User information
`org`optional	object	Organization information (personal org created automatically on registration)
`message`required	string	Success message
`status`optional	string	Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present) One of: `authenticated`, `mfa_required`, `mfa_enrollment_required` Default: `authenticated`
`mfa_token`optional	string	Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'
`token`optional	string	JWT authentication token (optional for cookie-based auth)
`expires_in`optional	integer	Token expiry time in seconds from now
`refresh_threshold`optional	integer	Recommended refresh threshold in seconds before expiry

Status	Meaning
400	Invalid request
401	Invalid credentials
422	Validation Error
429	Rate limit exceeded
500	Internal server error