Start provider sign-in

curl --request POST \
  --url https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "account_key": "<string>"
}
'

import requests

url = "https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"

payload = { "account_key": "<string>" }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({account_key: '<string>'})
};

fetch('https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_key' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"

	payload := strings.NewReader("{\n  \"account_key\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_key\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_key\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "login": {
    "login_id": "<string>",
    "provider_id": "<string>",
    "status": "pending",
    "expires_at": "2023-11-07T05:31:56Z",
    "error": "<string>",
    "events": [
      {
        "type": "info",
        "message": "<string>",
        "links": [
          {
            "url": "<string>",
            "label": "<string>"
          }
        ]
      }
    ],
    "prompt": {
      "id": 123,
      "type": "text",
      "message": "<string>",
      "placeholder": "<string>",
      "options": [
        {
          "id": "<string>",
          "label": "<string>",
          "description": "<string>"
        }
      ]
    },
    "next_action": {
      "type": "prompt",
      "prompt": {
        "id": 123,
        "type": "text",
        "message": "<string>",
        "placeholder": "<string>",
        "options": [
          {
            "id": "<string>",
            "label": "<string>",
            "description": "<string>"
          }
        ]
      },
      "authorization_url": "<string>"
    }
  }
}

{
  "error": "prompt_required"
}

{
  "error": "unauthorized"
}

{
  "error": "missing_scope",
  "required_scope": "sessions:read"
}

Provider credentials

Start provider sign-in

Starts the provider’s interactive flow. Follow next_action and poll until terminal. Codex and Radius default to device-code authentication; other interactive flows may require pasting a callback URL from the user’s browser. Copilot supports github.com accounts only; answer its Enterprise-domain prompt with an empty string. Starting again cancels only this user’s previous login. Requires a workspace-bound user OAuth grant with org:write and owner/admin membership. API keys and browser sessions are not accepted. Login challenges are private to the initiating user. Sessions expire after ten minutes and are process-local: requests must reach the same API instance; after a restart or a 404, start a new login. Provider device codes may expire sooner. Never share login URLs or codes.

_{Scope: org:write}

POST

organizations

{orgId}

provider-credentials

{providerId}

oauth

logins

Start provider sign-in

curl --request POST \
  --url https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "account_key": "<string>"
}
'

import requests

url = "https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"

payload = { "account_key": "<string>" }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({account_key: '<string>'})
};

fetch('https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_key' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"

	payload := strings.NewReader("{\n  \"account_key\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_key\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.reasonmachines.ai/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_key\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "login": {
    "login_id": "<string>",
    "provider_id": "<string>",
    "status": "pending",
    "expires_at": "2023-11-07T05:31:56Z",
    "error": "<string>",
    "events": [
      {
        "type": "info",
        "message": "<string>",
        "links": [
          {
            "url": "<string>",
            "label": "<string>"
          }
        ]
      }
    ],
    "prompt": {
      "id": 123,
      "type": "text",
      "message": "<string>",
      "placeholder": "<string>",
      "options": [
        {
          "id": "<string>",
          "label": "<string>",
          "description": "<string>"
        }
      ]
    },
    "next_action": {
      "type": "prompt",
      "prompt": {
        "id": 123,
        "type": "text",
        "message": "<string>",
        "placeholder": "<string>",
        "options": [
          {
            "id": "<string>",
            "label": "<string>",
            "description": "<string>"
          }
        ]
      },
      "authorization_url": "<string>"
    }
  }
}

{
  "error": "prompt_required"
}

{
  "error": "unauthorized"
}

{
  "error": "missing_scope",
  "required_scope": "sessions:read"
}

Authorizations

Authorization

string

header

required

A workspace-bound human user OAuth grant with org:write scope. The user must be an organization owner/admin. API keys and browser sessions are not accepted.

Path Parameters

orgId

string

required

Organization id or slug. Resolve it with GET /v3/self.

providerId

string

required

The provider identifier (e.g. openai, anthropic, google, deepseek).

Body

application/json

method

enum<string>

Use a method advertised by the catalog. Defaults to device_code for Codex and Radius, and interactive for other enabled providers.

Available options:

interactive,

browser,

device_code

account_key

string

An existing OAuth account to reconnect. Omit to connect the provider-identified Codex account; other enabled providers replace their single default connection.

Required string length: 1 - 512

Response

Sign-in started.

Show child attributes