Start provider sign-in
curl --request POST \
--url https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"account_key": "<string>"
}
'import requests
url = "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"
payload = { "account_key": "<string>" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({account_key: '<string>'})
};
fetch('https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'account_key' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"
payload := strings.NewReader("{\n \"account_key\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"account_key\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"account_key\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"login": {
"login_id": "<string>",
"provider_id": "<string>",
"status": "pending",
"expires_at": "2023-11-07T05:31:56Z",
"error": "<string>",
"events": [
{
"type": "info",
"message": "<string>",
"links": [
{
"url": "<string>",
"label": "<string>"
}
]
}
],
"prompt": {
"id": 123,
"type": "text",
"message": "<string>",
"placeholder": "<string>",
"options": [
{
"id": "<string>",
"label": "<string>",
"description": "<string>"
}
]
},
"next_action": {
"type": "prompt",
"prompt": {
"id": 123,
"type": "text",
"message": "<string>",
"placeholder": "<string>",
"options": [
{
"id": "<string>",
"label": "<string>",
"description": "<string>"
}
]
},
"instructions": "<string>",
"fallback": {
"reason": "device_code_may_be_disabled",
"instructions": "<string>",
"restart": {
"operation_id": "startProviderOAuthLogin",
"provider_id": "openai-codex",
"body": {
"method": "browser",
"account_key": "<string>"
}
}
},
"authorization_url": "<string>"
},
"method": "interactive",
"account_key": "<string>",
"failure_code": "<string>"
}
}{
"error": "prompt_required"
}{
"error": "missing_bearer",
"message": "Authorization required"
}{
"error": "missing_scope",
"required_scope": "sessions:read"
}{
"error": {
"type": "rate_limited",
"message": "This API key exceeded its request-rate limit"
}
}Provider credentials
Start provider sign-in
Starts the provider’s interactive flow. Follow next_action and poll until terminal. Codex and Radius default to device-code authentication; other interactive flows may require pasting a callback URL from the user’s browser. Copilot supports github.com accounts only; answer its Enterprise-domain prompt with an empty string. Starting again cancels only this user’s previous login. Requires a workspace-bound user OAuth grant with org:write and workspace membership; a member signs in again only to an account they connected. API keys and browser sessions are not accepted. Login challenges are private to the initiating user. Sessions are persisted for recovery across API instances and restarts until expires_at. An uncertain token exchange is not replayed: an explicit restart-required failure means start a fresh login, retaining account_key. After expiry or a 404, start a new login. Provider device codes may expire sooner. Never share login URLs or codes.
Scope:org:writePOST
/
v3
/
organizations
/
{orgId}
/
provider-credentials
/
{providerId}
/
oauth
/
logins
Start provider sign-in
curl --request POST \
--url https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"account_key": "<string>"
}
'import requests
url = "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"
payload = { "account_key": "<string>" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({account_key: '<string>'})
};
fetch('https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'account_key' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins"
payload := strings.NewReader("{\n \"account_key\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"account_key\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/oauth/logins")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"account_key\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"login": {
"login_id": "<string>",
"provider_id": "<string>",
"status": "pending",
"expires_at": "2023-11-07T05:31:56Z",
"error": "<string>",
"events": [
{
"type": "info",
"message": "<string>",
"links": [
{
"url": "<string>",
"label": "<string>"
}
]
}
],
"prompt": {
"id": 123,
"type": "text",
"message": "<string>",
"placeholder": "<string>",
"options": [
{
"id": "<string>",
"label": "<string>",
"description": "<string>"
}
]
},
"next_action": {
"type": "prompt",
"prompt": {
"id": 123,
"type": "text",
"message": "<string>",
"placeholder": "<string>",
"options": [
{
"id": "<string>",
"label": "<string>",
"description": "<string>"
}
]
},
"instructions": "<string>",
"fallback": {
"reason": "device_code_may_be_disabled",
"instructions": "<string>",
"restart": {
"operation_id": "startProviderOAuthLogin",
"provider_id": "openai-codex",
"body": {
"method": "browser",
"account_key": "<string>"
}
}
},
"authorization_url": "<string>"
},
"method": "interactive",
"account_key": "<string>",
"failure_code": "<string>"
}
}{
"error": "prompt_required"
}{
"error": "missing_bearer",
"message": "Authorization required"
}{
"error": "missing_scope",
"required_scope": "sessions:read"
}{
"error": {
"type": "rate_limited",
"message": "This API key exceeded its request-rate limit"
}
}Authorizations
A workspace-bound human user OAuth grant with org:write scope. The user must be an organization owner/admin. API keys and browser sessions are not accepted.
Path Parameters
Organization id or slug. Resolve it with GET /v3/self.
The provider identifier (e.g. openai, anthropic, google, deepseek), returned as provider_id by listProviderCatalog.
Body
application/json
Which sign-in flow to run, one of the provider's oauth_login.methods from listProviderCatalog. Omitted, the provider's default_method runs.
Available options:
interactive, browser, device_code An existing OAuth account to reconnect. Omit to connect the provider-identified Codex account; other enabled providers replace their single default connection.
Required string length:
1 - 512Response
Sign-in started.
The sign-in's current state. Never contains provider tokens.
Show child attributes
Show child attributes