Redeem an administrator email sign-in link
Consumes the one-time passwordless challenge shared by the email link and verification-code transports. Exactly one redemption can create a session. A valid mailbox proof must still pass current organization, membership and access-role eligibility. Successful redemption issues a bearer token and returns the authenticated user, access manifest, entitlements and billing context. A lifecycle lock conflict returns409 with Retry-After30seconds.
Path Parameters
Opaque one-time token from the administrator sign-in email.
Response
Operation result.
"success"
Current billing access state.
active, closed, lead, delinquent, due "active"
"Example Nonprofit"
"https://example.org"
New administrator bearer access token. Treat as a secret.
"example-access-token"
"2024-06-15T09:50:00Z"
Last successful billing payment timestamp, when available.
Latest billing payment amount or null.
Current resolved recurring billing amount.
An admin user — staff member of a client organization. Authenticates via Laravel Passport (bearer JWT) for the admin web app, and may also issue API keys (via ApiKey) for server-to-server integrations. Permissions are stored as JSON keyed by feature; group membership (group_id) supplies a baseline permission set on top of the per-user override.
Resolved billing plan key.
"growth"
"growth"