Auth

Base URL https://api.flam.fashion. Send Authorization: Bearer flam_sk_… on every call; a handful of routes are session-only and say so. How keys and roles work.

POST /api/toolkit/check-email

Route an entered email to the right sign-in step

PUBLIC by design. Reveals only whether an address exists and whether it has a password, for an address the caller already typed — the login page uses it to choose sign-in / Google-only / sign-up. Never 4xx: an unknown or missing email answers 200 with both flags false.

Request body — application/json (required)

{
  "email": "string"
}

Responses

200 returns:

{
  "exists": true,
  "hasPassword": true
}

Call it

curl -X POST "https://api.flam.fashion/api/toolkit/check-email" \
  -H "Authorization: Bearer $FLAM_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email":"string"}'