List account email addresses

Returns the verified addresses on the caller’s account, oldest verification first, flagging the primary one and recording how each address proved itself. An address still waiting on its confirmation code is not on the account and is not listed.

GET /v1/auth/emails

Authorization

__Host-better-auth.session_token API key · cookie required

Dashboard session cookie set at sign-in. An operation that lists only this scheme needs a person: API keys and machine credentials are refused. The same session token also works as Authorization: Bearer.

Responses

200 Response for status 200

• $schema string

Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.

• data object required

• emails object[] required

Array of object

• id string required
  • email string required
  • isPrimary boolean required
  • verifiedAt string required

ISO 8601 timestamp for when the address was verified. - verificationMethod string required

How the address proved itself: email_code a code mailed to it, oauth an identity provider that vouched for it, admin a Spacefast operator, migration an import.

Allowed: email_code, oauth, admin, migration

default Error

Every 4xx and 5xx response is one RFC 9457 problem document served as application/problem+json.

• $schema string

Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.

• type string required

URL of the documentation page for this error. Derived from code.

• title string required

Human-readable name of the error type. Derived from code.

• status integer required

HTTP status of the response, repeated in the body.

• detail string required

What went wrong in this request.

• code string required

Stable snake_case error code. Match on this, not on detail.

• pointer string

RFC 6901 JSON Pointer to the request field or batch entry that failed, for example /files/37/path. Present on validation failures.

• details object

Machine-readable context keyed by the error code.

• suggestions string[]

Recovery steps safe to show to a person.

• next string[]

Commands or API requests to run next, usable as written.

• requestId string required

ID of this request, from the X-Request-Id header or generated. Quote it when contacting support.

Try it

Server

Base URL https://api.spacefast.com

Custom base URL Overrides the selected server when set.

Authorization

API key Remember on this device Include my values in samples

Request

cURL

curl -X GET "https://api.spacefast.com/v1/auth/emails" \
  -H "Cookie: __Host-better-auth.session_token=YOUR_API_KEY"

JavaScript

const response = await fetch("https://api.spacefast.com/v1/auth/emails", {
  method: "GET",
  headers: {
    "Cookie": "__Host-better-auth.session_token=YOUR_API_KEY"
  }
});

Python

import requests

response = requests.get(
    "https://api.spacefast.com/v1/auth/emails",
    headers={
        "Cookie": "__Host-better-auth.session_token=YOUR_API_KEY"
    },
)

Response

200 default

{
  "$schema": "http://example.com",
  "data": {
    "emails": [
      {
        "id": "string",
        "email": "string",
        "isPrimary": true,
        "verifiedAt": "string",
        "verificationMethod": "email_code"
      }
    ]
  }
}

{
  "$schema": "http://example.com",
  "type": "string",
  "title": "string",
  "status": -9007199254740991,
  "detail": "string",
  "code": "string",
  "pointer": "string",
  "details": {
    "property1": null,
    "property2": null
  },
  "suggestions": [
    "string"
  ],
  "next": [
    "string"
  ],
  "requestId": "string"
}