Verify an email address

Verify an identity's email address using an email verification token, e.g. on your app's "verify email" page. This can be called from a browser.

The API token needs the authenticate permission for the identity's group. The token can only be used once, and only while the identity's email address is still the one it was sent to.

POST https://api.jsonpad.io/identities/email-verification/confirm

Example

123456

curl https://api.jsonpad.io/identities/email-verification/confirm \
  -H "Content-Type: application/json" \
  -H "x-api-token: <YOUR TOKEN>" \
  -d '{
        "verificationToken": "<VERIFICATION TOKEN>"
      }'

Parameters

No parameters

Request headers

required
x-api-tokenstringYour API token.

Request body

{verificationToken: "<VERIFICATION TOKEN>"
}

required
verificationTokenstringThe token from requesting email verification.

Response body

200 OK

The identity.

{id: "d64b8c9a-6486-4117-bae5-7ffb893dc7f9"
createdAt: "2026-09-18T20:32:11.878Z"
updatedAt: "2026-09-18T20:32:11.878Z"
name: "Sample Identity"
displayName: "Sample Display Name"
email: "identity@example.com"
emailVerified: true
hasPassword: true
tags: [0: "my-app"
]
group: "sample-group"
lastLoginAt: "2026-09-18T20:32:11.878Z"
activated: true
}

400 Bad Request

IDENTITY_VERIFICATION_TOKEN_INVALID if the token doesn't exist, has been used, has expired, or the identity's email address has changed.

Response headers

No response headers

2026-09-17