Delete an email
Deletes a non-primary email from the caller's profile after recent authentication. Returns 400 when the email is the caller's primary contact or their only email. A user token calls this on behalf of the signed-in user. Returns 404 when the contact does not exist, and 409 when the email is the target of a primary-contact change in progress.
Authorization
oauth2 Create a client with POST /v1/oauth/clients, then exchange its credentials for an access token. AUTHORIZATION_CODE clients act on behalf of a signed-in user and always use PKCE; CLIENT_CREDENTIALS clients act as themselves. A client may only be granted scopes its creator already holds — read the grantable list from GET /v1/oauth/clients/scopes.
In: header
Path Parameters
Unique identifier of the email contact.
uuidResponse Body
application/json
application/json
application/json
application/json
application/json
curl -X DELETE "https://example.com/v1/user/settings/emails/550e8400-e29b-41d4-a716-446655440000"{ "code": "BAD_REQUEST", "description": "Bad Request"}{ "code": "UNAUTHORISED", "description": "Unauthorised"}{ "code": "FORBIDDEN", "description": "Forbidden"}{ "code": "RATE_LIMIT_EXCEEDED", "description": "Too Many Requests"}{ "code": "INTERNAL_ERROR", "description": "Internal Server Error"}Add an email POST
Adds a global pending email to the caller's profile after recent authentication, and sends an OTP to it. Pending contacts do not reserve the identity; the first caller to verify a value wins the global claim. Five invalid OTP confirmations lock the contact until a platform admin resets it. Returns 400 when the caller already has the maximum number of email contacts. The returned `otp` tells where the OTP went. Confirm the OTP next. The first email of a caller with no primary email becomes the primary email when its verification completes. With an open current account, the account provider sends its OTPs. While the current account is pending, Cowdi sends the OTP.
Confirm the email OTP POST
Confirms the OTP for the step named by `step` and validates the contact. A user token calls this on behalf of the signed-in user. When another OTP is still due, the email stays unvalidated and `otp` describes the next OTP. Returns 404 when the contact does not exist, and 409 when the email is already registered on another profile.