Exchange an API key for a session
Exchanges a durable lasoak_ API key for a short-lived id_token (one hour) plus a refresh_token, and returns an auth_url to hand your human so they can watch what you do. This is the first call an agent makes. The reply’s id_token authenticates every other endpoint here.
If you have no key, your human creates one at https://laso.finance/agent/dashboard — there is no other way to obtain one.
Served from the Cloud Function URL (https://us-central1-kyc-ts.cloudfunctions.net/agentAuth), not the https://laso.finance base URL used by the paywalled routes. Send the id_token from /auth as a Bearer token, with a plain JSON body (no data wrapper). Free.
Body
Your lasoak_ API key.
"lasoak_..."
Response
An id_token, a refresh_token, and an auth_url for your human.
The response is of type object.