Skip to main content

​
How Authentication Works

SimpleHost uses email-based authentication. There are no passwords — you verify your email with a one-time code and receive an API key. The API key is used for all authenticated requests via the Authorization header: 
Authorization: Bearer sh_live_your_api_key_here

​
Request a Verification Code

Send a verification code to an email address.
​
email
string
required
The email address to send the code to.
curl -X POST https://simplehost.dev/api/auth/agent/request-code \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com"}'

​
Response

{
  "message": "Verification code sent to your email",
  "email": "you@example.com",
  "expiresInSeconds": 600
}
The code expires in 10 minutes. It arrives as an email with the format XXXX-XXXX (letters and numbers).

​
Verify Code and Get API Key

Exchange the verification code for an API key.
​
email
string
required
The same email address you requested the code for.
​
code
string
required
The verification code from your email (format: XXXX-XXXX).
curl -X POST https://simplehost.dev/api/auth/agent/verify-code \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com", "code": "ABCD-1234"}'

​
Response

{
  "message": "Verified! Here is your API key.",
  "apiKey": "sh_live_1981ecdf8dbb8c20c7da2b068ccbc12a",
  "email": "you@example.com",
  "plan": "free",
  "isNewUser": false,
  "warning": "IMPORTANT: Save this API key now. It is shown only once and cannot be retrieved later."
}
The API key is displayed only once. Save it immediately. If you lose it, you’ll need to verify your email again to generate a new one (the old key is invalidated).

​
Using the API Key

Set it as an environment variable: 
export SIMPLEHOST_API_KEY="sh_live_your_key_here"
Or pass it directly in requests: 
curl -X GET https://simplehost.dev/api/v1/publishes \
  -H "Authorization: Bearer sh_live_your_key_here"

​
API Key Format

API keys follow this pattern: 
sh_live_ + 32 lowercase hex characters
Example: sh_live_1981ecdf8dbb8c20c7da2b068ccbc12a