ApiAuth
Login with nostr (passwordless)
POST
Verify a signed kind 27235 login event. Resolves the account from linked identities/wallet/addresses, or auto-provisions a new nostr-first user.
X-API-Version?stringAPI version for header-based versioning
Default
"1"Value in
"1""2"curl -X POST 'http://localhost:3001/api/v1/auth/nostr'Example Response201
Empty
Get a nostr login challenge GET
Issues a single-use challenge for a pubkey (npub or hex). Sign a kind 27235 event with tags ["challenge", c] and ["expires", unix] and POST it to /auth/nostr.
Login with an nsec (private key) POST
For users without a browser signer. The key signs a login event server-side and is never stored or logged. Auto-provisions new keys.