> ## Documentation Index
> Fetch the complete documentation index at: https://docs.caratuva.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Exchange a magic-link token for a 12h Bearer JWT

> Single-use: consuming a token marks it consumedAt and invalidates further uses.



## OpenAPI

````yaml https://api.caratuva.com/docs-json post /v1/auth/sessions/consume
openapi: 3.0.0
info:
  title: Caratuva API
  description: >-
    Cross-border B2B payments. Fiat on-ramp → USDC → PIX off-ramp.


    Every request runs in **test** or **live** mode on this single host — there
    is no separate sandbox URL. API keys carry the mode in their prefix
    (`pk_test_…` / `pk_live_…`); dashboard JWTs start in test and re-mint via
    `POST /v1/auth/switch-mode`. Test mode runs the full pipeline against a
    sandbox payment instance (KYB/KYC auto-approve, no real money); live runs on
    real rails and requires approved KYB. Test and live data are fully isolated.
    Check readiness with `GET /v1/onboarding/status`.
  version: 1.0.0
  contact: {}
servers: []
security: []
tags: []
paths:
  /v1/auth/sessions/consume:
    post:
      tags:
        - auth
      summary: Exchange a magic-link token for a 12h Bearer JWT
      description: >-
        Single-use: consuming a token marks it consumedAt and invalidates
        further uses.
      operationId: AuthController_consume
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConsumeMagicLinkDto'
      responses:
        '200':
          description: JWT + user shape returned for dashboard chrome
components:
  schemas:
    ConsumeMagicLinkDto:
      type: object
      properties: {}

````