Error
Auth
Mint a one-time signing challenge.
Returns a short text the wallet (passkey) must sign to prove ownership. The signed result is then submitted to POST /v1/auth/session to establish a session. address is optional: omit it for passkey login (where the address is only known after the assertion) to get a generic nonce, which the session call consumes by its exact text.
POST
Error
Authorizations
HttpOnly session cookie set by POST /v1/auth/session. Mutating requests must also send the CSRF token (returned by that call) in the x-csrf-token header.
Body
application/json
Alephium address (base58, optional :N group suffix).
Required string length:
30 - 80Pattern:
^[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz:]+$
