POST
/api/v2/users/account-links/scanRegisters that a White Label app scanned an account-link QR code.
The QR token is opaque, company-scoped, expires after five minutes, and never contains account data.
Authentication
Send your API key in the x-api-key header on every request.
Request body
application/json
| Field | Type | Required | Description |
|---|---|---|---|
| Token | string | Yes | |
| ApplicationName | string | Yes | |
| DeviceName | string | No |
Responses
200 — OK
| Field | Type | Required | Description |
|---|---|---|---|
| ChallengeId | string (uuid) | Yes | |
| Status | string | Yes | |
| ExpiresAt | string (date-time) | Yes |
Example request
curl -X POST "https://{base_url}/api/v2/users/account-links/scan" \
-H "x-api-key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"Token":"…","ApplicationName":"…"}'This page is generated from the live OpenAPI specification and always matches the current API.