magic link email API

A magic link email API is an API that generates and sends a one-time login link to a user’s email, so they can sign in without a password.

Typical flow

1. User enters email.
2. Your backend calls the API to create a magic link/token.
3. The API sends an email with the link.
4. User clicks the link.
5. Your app verifies the token and logs the user in.

Common API features

• Create/send magic link
• Verify token
• Token expiration
• Single-use links
• Custom email templates
• Redirect URL after login

Example request

POST /auth/magic-link
Content-Type: application/json

{
  "email": "user@example.com",
  "redirectUrl": "https://yourapp.com/auth/callback"
}

Example response

{
  "message": "Magic link sent"
}

Verification example

POST /auth/magic-link/verify
Content-Type: application/json

{
  "token": "abc123"
}

Security best practices

• Expire links quickly, like 10–30 minutes
• Make tokens single-use
• Rate-limit requests to prevent abuse
• Don’t reveal whether an email exists
• Use HTTPS
• Log suspicious attempts

Popular services

If you want a ready-made solution, common options include:

• Auth0
• Firebase Auth
• Supabase Auth
• Clerk
• Magic.link
• AWS Cognito with custom flows

If you want, I can also give you:

1. a sample API design,
2. backend code for sending magic links,
3. or a comparison of providers.