{"title":"User & Minds API","slug":"user","category":"api","summary":"Account management — register, login, create minds, list minds, delete minds. JWT-protected.","audience":["human","llm"],"tags":["api","user","account","minds","jwt"],"difficulty":"beginner","updated":"2026-06-27","word_count":289,"read_minutes":1,"llm_context":"Auth: JWT (from /register or /login)\nRegister: POST /register { email, password, display_name? } → returns JWT\nLogin: POST /login { email, password } → returns JWT\nCreate mind: POST /minds { name, description? } → returns mind_key (shown once!)\nList minds: GET /minds\nDelete mind: DELETE /minds/:id (irreversible — deletes all memories!)\nJWT expires after 7 days. Mind Key never expires.\nMind Key is shown only once at creation — save it permanently.\n","lang":"en","translated":true,"requested_lang":"en","content_markdown":"\n# User & Minds API\n\nThe User & Minds API handles account management. These endpoints use JWT\nauthentication (not Mind Keys) because they operate at the account level, not\nthe mind level.\n\n## Authentication Endpoints\n\n### POST /register\n\nCreate a new user account.\n\n```bash\ncurl -X POST https://synapse.schaefer.zone/register \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"email\": \"you@example.com\",\n \"password\": \"your-secure-password\",\n \"display_name\": \"Michael\"\n }'\n```\n\nResponse:\n\n```json\n{\n \"jwt\": \"eyJhbGci...\",\n \"user\": {\n \"id\": \"u_abc123\",\n \"email\": \"you@example.com\",\n \"display_name\": \"Michael\",\n \"created_at\": \"2026-06-27T...\"\n }\n}\n```\n\n### POST /login\n\nLogin to an existing account.\n\n```bash\ncurl -X POST https://synapse.schaefer.zone/login \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"email\": \"you@example.com\",\n \"password\": \"your-secure-password\"\n }'\n```\n\nResponse: same as `/register`.\n\n## Minds Endpoints\n\n### POST /minds\n\nCreate a new mind. Returns the Mind Key — **save it immediately**, it's shown\nonly once.\n\n```bash\ncurl -X POST https://synapse.schaefer.zone/minds \\\n -H \"Authorization: Bearer YOUR_JWT\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"name\": \"Work Mind\",\n \"description\": \"Job-related memories\"\n }'\n```\n\nResponse:\n\n```json\n{\n \"id\": \"m_xyz789\",\n \"name\": \"Work Mind\",\n \"description\": \"Job-related memories\",\n \"mind_key\": \"mk_aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789\",\n \"created_at\": \"2026-06-27T...\"\n}\n```\n\n> [!CRITICAL]\n> The `mind_key` is shown only once. If you lose it, you cannot retrieve it —\n> you must delete the mind and create a new one (which loses all stored memories).\n\n### GET /minds\n\nList all minds for the current user.\n\n```bash\ncurl -H \"Authorization: Bearer YOUR_JWT\" \\\n https://synapse.schaefer.zone/minds\n```\n\nResponse:\n\n```json\n{\n \"minds\": [\n {\n \"id\": \"m_xyz789\",\n \"name\": \"Work Mind\",\n \"description\": \"Job-related memories\",\n \"created_at\": \"2026-06-27T...\",\n \"memory_count\": 142,\n \"last_activity\": \"2026-06-27T...\"\n }\n ]\n}\n```\n\n### DELETE /minds/:id\n\nDelete a mind permanently.\n\n```bash\ncurl -X DELETE -H \"Authorization: Bearer YOUR_JWT\" \\\n https://synapse.schaefer.zone/minds/m_xyz789\n```\n\n> [!WARNING]\n> Deleting a mind is **irreversible**. All memories, tasks, chat history, and\n> scripts in that mind are permanently lost. Export first via\n> `GET /memory/mind-export` if you need a backup.\n\n## Multi-Mind Pattern\n\nMost users benefit from multiple minds to keep contexts isolated:\n\n```bash\n# Create minds for different contexts\ncurl -X POST .../minds -d '{\"name\": \"work\", \"description\": \"Job\"}'\n# → mind_key: mk_work...\n\ncurl -X POST .../minds -d '{\"name\": \"personal\", \"description\": \"Personal life\"}'\n# → mind_key: mk_personal...\n\ncurl -X POST .../minds -d '{\"name\": \"project-synapse\", \"description\": \"Synapse dev\"}'\n# → mind_key: mk_synapse...\n```\n\nUse different Mind Keys in different LLM sessions to keep contexts isolated.\n\n## Account Security\n\n### Password requirements\n\n- Minimum 6 characters\n- No maximum (use a password manager)\n- Stored as bcrypt hash (never plaintext)\n\n### JWT expiry\n\nJWTs expire after **7 days**. When expired, simply call `/login` again.\n\n### Mind Key security\n\nMind Keys never expire. If a Mind Key is compromised:\n\n1. Create a new mind via `POST /minds`\n2. Update your LLM config with the new Mind Key\n3. Delete the compromised mind via `DELETE /minds/:id`\n\n## Next Steps\n\n- [Authentication](/docs/getting-started/authentication) — full auth guide\n- [Mind Key vs JWT](/docs/getting-started/mind-key-vs-jwt) — decision guide\n- [Sharing API](/docs/api/user) — share minds with other users\n","content_html":"

User & Minds API

\n

The User & Minds API handles account management. These endpoints use JWT\nauthentication (not Mind Keys) because they operate at the account level, not\nthe mind level.

\n

Authentication Endpoints

\n

POST /register

\n

Create a new user account.

\n
curl -X POST https://synapse.schaefer.zone/register \\\n  -H "Content-Type: application/json" \\\n  -d '{\n    "email": "you@example.com",\n    "password": "your-secure-password",\n    "display_name": "Michael"\n  }'

Response:

\n
{\n  "jwt": "eyJhbGci...",\n  "user": {\n    "id": "u_abc123",\n    "email": "you@example.com",\n    "display_name": "Michael",\n    "created_at": "2026-06-27T..."\n  }\n}

POST /login

\n

Login to an existing account.

\n
curl -X POST https://synapse.schaefer.zone/login \\\n  -H "Content-Type: application/json" \\\n  -d '{\n    "email": "you@example.com",\n    "password": "your-secure-password"\n  }'

Response: same as /register.

\n

Minds Endpoints

\n

POST /minds

\n

Create a new mind. Returns the Mind Key — save it immediately, it's shown\nonly once.

\n
curl -X POST https://synapse.schaefer.zone/minds \\\n  -H "Authorization: Bearer YOUR_JWT" \\\n  -H "Content-Type: application/json" \\\n  -d '{\n    "name": "Work Mind",\n    "description": "Job-related memories"\n  }'

Response:

\n
{\n  "id": "m_xyz789",\n  "name": "Work Mind",\n  "description": "Job-related memories",\n  "mind_key": "mk_aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789",\n  "created_at": "2026-06-27T..."\n}
The `mind_key` is shown only once. If you lose it, you cannot retrieve it —\nyou must delete the mind and create a new one (which loses all stored memories).

GET /minds

\n

List all minds for the current user.

\n
curl -H "Authorization: Bearer YOUR_JWT" \\\n     https://synapse.schaefer.zone/minds

Response:

\n
{\n  "minds": [\n    {\n      "id": "m_xyz789",\n      "name": "Work Mind",\n      "description": "Job-related memories",\n      "created_at": "2026-06-27T...",\n      "memory_count": 142,\n      "last_activity": "2026-06-27T..."\n    }\n  ]\n}

DELETE /minds/:id

\n

Delete a mind permanently.

\n
curl -X DELETE -H "Authorization: Bearer YOUR_JWT" \\\n     https://synapse.schaefer.zone/minds/m_xyz789
Deleting a mind is **irreversible**. All memories, tasks, chat history, and\nscripts in that mind are permanently lost. Export first via\n`GET /memory/mind-export` if you need a backup.

Multi-Mind Pattern

\n

Most users benefit from multiple minds to keep contexts isolated:

\n
# Create minds for different contexts\ncurl -X POST .../minds -d '{"name": "work", "description": "Job"}'\n# → mind_key: mk_work...\n\ncurl -X POST .../minds -d '{"name": "personal", "description": "Personal life"}'\n# → mind_key: mk_personal...\n\ncurl -X POST .../minds -d '{"name": "project-synapse", "description": "Synapse dev"}'\n# → mind_key: mk_synapse...

Use different Mind Keys in different LLM sessions to keep contexts isolated.

\n

Account Security

\n

Password requirements

\n\n

JWT expiry

\n

JWTs expire after 7 days. When expired, simply call /login again.

\n

Mind Key security

\n

Mind Keys never expire. If a Mind Key is compromised:

\n
    \n
  1. Create a new mind via POST /minds
    2. \n
  2. Update your LLM config with the new Mind Key
    3. \n
  3. Delete the compromised mind via DELETE /minds/:id
    4. \n
\n

Next Steps

\n\n","urls":{"html":"/docs/api/user","text":"/docs/api/user?format=text","json":"/docs/api/user?format=json","llm":"/docs/api/user?format=llm"},"translations_available":["en","zh","hi","es","fr","ar","pt","ru","ja","de","it","ko","nl","pl","tr","sv","vi","th","id","uk"]}