OpenFunnel Authentication (for agents)

Base URL: https://api.openfunnel.dev Every request authenticates with a single header:

There is no OAuth flow and no dashboard step. You can obtain a key programmatically in two calls.

Step 1 — Request a verification code

POST /api/v1/agent/sign-up
Content-Type: application/json

{ "email": "founder@example.com" }

Sends a 6-digit code to the email. New emails create an account; existing emails use this to recover a lost key. Response:

{ "email": "founder@example.com", "message": "Verification code sent to your email" }

POST /api/v1/agent/verify
Content-Type: application/json

{ "email": "founder@example.com", "otp_code": "123456" }

Response:

{
  "email": "founder@example.com",
  "api_key": "of_1234567890abcdef...",
  "is_new_user": true
}

Store api_key securely. It is returned only once and is not retrievable later. To recover it, call sign-up again with the same email.

POST /api/v1/credits/balance
X-API-Key: of_1234567890abcdef...
Content-Type: application/json

{}

HTTP	error_code	Meaning
400	OTP_EXPIRED	No pending code. Call sign-up again.
400	OTP_INVALID	Wrong code. `details.remaining_attempts` shows tries left.
429	RATE_LIMITED	Too many sign-up attempts. `details.retry_after_seconds`.
429	OTP_MAX_ATTEMPTS	Code exhausted (10 tries). Call sign-up again.
500	INTERNAL_ERROR	Transient. Retry.

Verification codes expire after 24 hours and allow up to 10 attempts.