Nhost API

Name: Nhost API
Brand: Nhost API
Availability: InStock

★ Only Publicly Available OpenAPI DocumentIdentity AuthAuthenticationbearer16 EndpointsREST

For Agents

Sign users up, log them in, refresh tokens, and manage MFA on a Nhost backend through 16 REST endpoints under {subdomain}.auth.{region}.nhost.run/v1.

Install Jentic One Beta

Connect the Nhost API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Nhost API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with Nhost API.

Issue magic-link passwordless sign-in emails through /signin/passwordless/email

Authenticate users with personal access tokens through /signin/pat

GET STARTED

Start building with Nhost API

Explore with Jentic

View OpenAPI Document

Jentic publishes the only available OpenAPI specification for Nhost API, keeping it validated and agent-ready. Nhost is an open-source Firebase alternative that bundles authentication, GraphQL (Hasura), file storage, and serverless functions for app developers. This spec covers the Auth REST API: email and password sign-in, magic-link passwordless flows, personal access tokens, MFA TOTP enrolment, anonymous sessions, and user profile management. Each Nhost project runs in its own subdomain and region, so the base URL is templated with subdomain and region placeholders that resolve at request time.

Use Cases

Patterns agents use Nhost API for, with concrete tasks.

★ Email and password authentication for a Nhost app

Add full email and password authentication to a web or mobile app backed by Nhost. The Auth API handles user registration, sign-in, password hashing, refresh-token rotation, and password reset emails, so the application only needs to forward credentials and store the returned tokens. Sign-up and sign-in each return access and refresh tokens that can be used immediately against the GraphQL and Storage APIs on the same project.

Call POST /signup/email-password with email user@example.com and a password, then call POST /signin/email-password to confirm a session token is returned.

Passwordless magic-link sign-in

Offer passwordless sign-in by emailing the user a one-time magic link. The /signin/passwordless/email endpoint accepts an email address and dispatches a link that, when clicked, completes the sign-in and returns a session. Useful for low-friction onboarding and for apps that do not want to manage user passwords at all.

Call POST /signin/passwordless/email with the user email so Nhost dispatches a magic-link sign-in email.

TOTP multi-factor authentication enrolment

Add a second factor to user accounts using time-based one-time passwords. The agent calls POST /user/mfa to generate a TOTP secret and provisioning URI, displays a QR code for the user to scan into Google Authenticator or 1Password, then calls POST /user/mfa/totp with the user-supplied code to activate MFA on the account.

Call POST /user/mfa to generate a TOTP secret, then POST /user/mfa/totp with the six-digit code from the user's authenticator app to activate MFA.

AI agent user onboarding flows

An AI agent embedded in a support or onboarding flow can register and authenticate users on a Nhost backend without the developer hand-coding requests. Through Jentic, the agent searches for the relevant Nhost auth operation by intent, loads the schema, and submits the credentials. Tokens are returned via Jentic's vault rather than ever entering the agent's chat context.

Search Jentic for 'sign up a user with email and password', load the Nhost POST /signup/email-password schema, and execute it with sample credentials.

Key Endpoints

16 endpoints — jentic publishes the only available openapi specification for nhost api, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/signup/email-password

POST

/signin/email-password

POST

/signin/passwordless/email

Send a magic-link sign-in email

POST

/token

Refresh an expired access token

POST

/user/mfa

Generate a TOTP secret for MFA enrolment

POST

/user/mfa/totp

Activate TOTP MFA after verifying a code

GET

/user

Get the current authenticated user

POST

/signout

Sign the user out and invalidate the refresh token

POST

/signup/email-password

POST

/signin/email-password

POST

/signin/passwordless/email

Send a magic-link sign-in email

POST

/token

Refresh an expired access token

POST

/user/mfa

Generate a TOTP secret for MFA enrolment

Why Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

Nhost bearer tokens are stored encrypted in the Jentic vault. Agents call Auth endpoints via Jentic and receive scoped session tokens; raw refresh tokens never enter the agent's chat context.

Intent-based discovery

Agents search Jentic by intent (e.g. 'sign up a user with email and password') and Jentic returns the matching Nhost endpoint with its request schema, so the agent can call /signup/email-password without browsing docs.

Time to first call

Direct Nhost Auth integration: 1-3 days to wire sign-up, sign-in, refresh, and MFA flows. Through Jentic: under 1 hour — search, load schema, execute.

FAQs

Specific to using Nhost API through Jentic.

Why is there no official OpenAPI spec for Nhost API?

Nhost does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Nhost API via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.

What authentication does the Nhost API use?

The Nhost Auth API uses HTTP bearer tokens. Sign-in endpoints return an access token that callers send as Authorization: Bearer <token> on subsequent requests. Through Jentic, the bearer token is stored encrypted in the vault and never enters the agent's context.

Can I enrol a user in MFA with the Nhost API?

Yes. Call POST /user/mfa to generate a TOTP secret and provisioning URI, present that to the user as a QR code, then call POST /user/mfa/totp with the six-digit code from their authenticator app to activate MFA on the account.

What are the rate limits for the Nhost API?

Nhost does not publish public rate limits in this OpenAPI spec. Practical limits are governed per project on the Nhost backend; if requests are throttled, expect HTTP 429 responses with a Retry-After hint and back off accordingly.

How do I sign up a user with the Nhost API through Jentic?

Run pip install jentic, then search Jentic for 'sign up a user with email and password'. Load the Nhost POST /signup/email-password schema and execute it with the email and password fields. Jentic returns the access and refresh tokens to your application.

Is the Nhost API free to use?

Nhost offers a free tier for projects, with paid plans for larger workloads. The Auth API itself does not have separate per-call pricing — usage is included with your Nhost project plan. See nhost.io for current plan limits.

Nhost API

Connect the Nhost API to your agent

Capabilities

Start building with Nhost API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs