AGG is currently in alpha. APIs, components, and docs may change.
curl --request POST \
--url https://api.agg.market/users/me/link-account/start \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'x-app-id: <api-key>' \
--data '
{
"provider": "google",
"redirectUrl": "<string>",
"email": "jsmith@example.com"
}
'{
"type": "redirect",
"url": "<string>",
"success": true
}Initiates an account-link flow. Authenticated-only. For OAuth providers returns a provider redirect URL and sets an HttpOnly proof cookie that is required at callback time. The same-browser guarantee plus a mode discriminator on the state JWT prevents a phished link URL from attaching a victim’s identity to the attacker’s principal.
curl --request POST \
--url https://api.agg.market/users/me/link-account/start \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'x-app-id: <api-key>' \
--data '
{
"provider": "google",
"redirectUrl": "<string>",
"email": "jsmith@example.com"
}
'{
"type": "redirect",
"url": "<string>",
"success": true
}Documentation Index
Fetch the complete documentation index at: https://docs.agg.market/llms.txt
Use this file to discover all available pages before exploring further.
Your application ID. Required for all app-tier and user-tier routes.
JWT access token returned by POST /auth/verify. Required for user-tier routes.