Skip to main content

Exchange a device-key proof for operator credentials

POST 
/v1/auth/pairing-sessions/exchange

Verify the candidate device's Ed25519 signature, consume its single-use session or independent invitation attempt, and return short-lived access plus rotating refresh credentials exactly once. The device limit is enforced atomically with the credential commit: when the cluster already has five active paired devices the exchange returns 409 and issues no credential.

Request​

Responses​

Successful Response