> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usecontra.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify Email

> Submit the OTP from your inbox. Returns access_token, refresh_token, and your first application's api_key.

The moment you receive your first `api_key`.

## Request

```bash theme={null}
curl -X POST https://auth.contra.id/v1/programmatic/verify-email \
  -H "Content-Type: application/json" \
  -d '{
    "email": "you@yourco.com",
    "code":  "A3K9F2"
  }'
```

## Response · 200

```json theme={null}
{
  "access_token":  "eyJ…",
  "refresh_token": "eyJ…",
  "expires_in":    86400,
  "organization": { "uuid": "…", "name": "Your Co" },
  "application":  {
    "uuid":     "app_…",
    "client_id":"cli_…",
    "api_key":  "ctr_42LvSyZn5ioLSyBknquXYK"
  }
}
```

`application.api_key` becomes your `x-api-key` for all `/v1/*` calls.

## Next

```bash theme={null}
export CONTRA_KEY="ctr_42LvSyZn…"
curl https://identity.contra.id/v1/workflows -H "x-api-key: $CONTRA_KEY"
```