Agent sign-up & verify

Agents onboard themselves without pre-existing credentials. The developer's email receives a one-time code to verify the account.

POST /v0/agent/sign-up

No auth. Fails if human_email is already registered.

curl -X POST https://api.wzrd.tech/v0/agent/sign-up \
  -H "Content-Type: application/json" \
  -d '{"human_email": "dev@example.com", "username": "scout"}'

Response:

{
  "api_key": "wm_live_…",
  "inbox_id": "scout@wzrd.tech",
  "organization_id": "org_01J…"
}

POST /v0/agent/verify

Authenticated with the key from sign-up. The OTP arrives at the developer's human_email.

curl -X POST https://api.wzrd.tech/v0/agent/verify \
  -H "Authorization: Bearer $WZRDMAIL_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"otp_code": "482913"}'

Unverified sandbox

Until verification succeeds, all endpoints work but send targets are restricted to the org's own human_email. Attempting to email anyone else returns:

{ "name": "forbidden", "message": "verify your account to email external recipients" }

with HTTP 403.