# Signet — machine on-ramp for this instance
# https://kapable-dev.kapable.kapable.run

Signet is a better-auth-compatible authentication server. It speaks the better-auth
HTTP wire protocol; any better-auth client library integrates against it unchanged.

Compatibility profile: Signet compatibility profile v1 — better-auth 1.6.23, certification gap 0, end-to-end acceptance 14 / 14 (recorded 2026-07-22).

API base path: /api/auth
All endpoint paths below are relative to https://kapable-dev.kapable.kapable.run/api/auth
Machine-readable OpenAPI schema: GET /api/auth/open-api/generate-schema
Human docs + config reference: GET /docs
Certification receipt (JSON): GET /certification.json
Full machine reference: https://kapable-dev.kapable.kapable.run/llms-full.txt
Support: self-serve documentation plus best-effort support; no SLA.

## Certified endpoints
POST /sign-up/email  [Core]
POST /sign-in/anonymous  [Anonymous]
POST /siwe/nonce  [SIWE]
POST /siwe/get-nonce  [SIWE]
POST /siwe/verify  [SIWE]
POST /admin/set-user-password  [Admin]
POST /admin/create-user  [Admin]
GET /admin/list-users  [Admin]
POST /admin/set-role  [Admin]
POST /admin/impersonate-user  [Admin]
POST /admin/stop-impersonating  [Admin]
POST /sign-in/email  [Core]
POST /sign-in/username  [Username]
POST /is-username-available  [Username]
GET, POST /get-session  [Core]
POST /sign-out  [Core]
GET /multi-session/list-device-sessions  [Multi Session]
POST /multi-session/set-active  [Multi Session]
POST /multi-session/revoke  [Multi Session]
GET /list-sessions  [Core]
POST /revoke-session  [Core]
POST /revoke-sessions  [Core]
POST /revoke-other-sessions  [Core]
POST /update-session  [Core]
GET /list-accounts  [Core]
GET /account-info  [Core]
POST /unlink-account  [Core]
POST /change-password  [Core]
POST /verify-password  [Core]
POST /two-factor/enable  [Two Factor]
GET /jwks  [JWKS]
POST /device/code  [Device Authorization]
POST /device/token  [Device Authorization]
GET /device  [Device Authorization]
POST /device/approve  [Device Authorization]
POST /device/deny  [Device Authorization]
GET /one-time-token/generate  [One Time Token]
POST /one-time-token/verify  [One Time Token]
GET /.well-known/oauth-authorization-server  [OAuth]
GET /.well-known/openid-configuration  [OIDC]
POST /oauth2/register  [OIDC]
GET /oauth2/authorize  [OIDC]
GET /oauth2/end-session  [OIDC]
POST /oauth2/create-client  [OAuth Client]
GET /oauth2/get-client  [OAuth Client]
GET /oauth2/public-client  [OAuth Client]
GET /oauth2/get-clients  [OAuth Client]
POST /oauth2/update-client  [OAuth Client]
POST /oauth2/client/rotate-secret  [OAuth Client]
POST /oauth2/delete-client  [OAuth Client]
POST /mcp/register  [MCP]
POST /mcp/token  [MCP]
GET /mcp/get-session  [MCP]
GET /mcp/userinfo  [MCP]
GET /mcp/authorize  [MCP]
POST /organization/create  [Organization]
POST /organization/check-slug  [Organization]
POST /organization/has-permission  [Organization]
POST /organization/update  [Organization]
POST /organization/delete  [Organization]
GET /organization/get-full-organization  [Organization]
POST /organization/set-active  [Organization]
GET /organization/list  [Organization]
POST /organization/remove-member  [Organization]
POST /organization/update-member-role  [Organization]
GET /organization/get-active-member  [Organization]
POST /organization/leave  [Organization]
GET /organization/list-members  [Organization]
GET /organization/get-active-member-role  [Organization]
POST /organization/invite-member  [Organization]
POST /organization/accept-invitation  [Organization]
POST /organization/reject-invitation  [Organization]
POST /organization/cancel-invitation  [Organization]
GET /organization/get-invitation  [Organization]
GET /organization/list-invitations  [Organization]
GET /organization/list-user-invitations  [Organization]
POST /email-otp/send-verification-otp  [Email OTP]
POST /email-otp/check-verification-otp  [Email OTP]
POST /email-otp/verify-email  [Email OTP]
POST /sign-in/email-otp  [Email OTP]
POST /email-otp/reset-password  [Email OTP]
POST /email-otp/request-password-reset  [Email OTP]
POST /forget-password/email-otp  [Email OTP]
POST /email-otp/request-email-change  [Email OTP]
POST /email-otp/change-email  [Email OTP]
POST /sign-in/magic-link  [Magic Link]
GET /magic-link/verify  [Magic Link]
POST /phone-number/send-otp  [Phone Number]
POST /phone-number/verify  [Phone Number]
POST /phone-number/request-password-reset  [Phone Number]
POST /phone-number/reset-password  [Phone Number]
GET /passkey/generate-register-options  [Passkey]
GET /passkey/generate-authenticate-options  [Passkey]
POST /sso/register  [SSO]
POST /sign-in/sso  [SSO]
GET, POST /sso/saml2/callback/{providerId}  [SSO]
POST /update-user  [Core]
POST /reset-password  [Core]
GET /reset-password/{token}  [Core]
GET /verify-email  [Core]
POST /request-password-reset  [Core]
POST /send-verification-email  [Core]
POST /change-email  [Core]
POST /delete-user  [Core]
POST /sign-in/social  [OAuth]
POST /link-social  [OAuth]
GET /oauth-proxy-callback  [oauth-proxy]
POST /api-key/create  [api-key]
POST /api-key/verify  [api-key]
POST /api-key/update  [api-key]
POST /api-key/delete  [api-key]
GET /api-key/list  [api-key]
GET, POST /callback/{id}  [OAuth]
GET /error  [Core]
GET /open-api/generate-schema  [Open API]