X Account Email Verification API & Login Challenges

{
  "id": "42",
  "xUserId": "9876543210",
  "xUsername": "elonmusk",
  "status": "active",
  "health": "healthy",
  "createdAt": "2025-01-15T12:00:00Z"
}

{
  "object": "x_account_connection_challenge",
  "id": "xch_8vGd8Y9JvH6dV0xA",
  "status": "requires_email_code",
  "expiresAt": "2026-05-08T12:10:00Z",
  "message": "Enter the email verification code to continue.",
  "username": "elonmusk"
}

{
  "error": "invalid_input",
  "message": "Invalid input. Check the request body."
}

{
  "error": "unauthenticated",
  "message": "Authentication required. Provide a valid API key or bearer token."
}

{
  "error": "not_found",
  "message": "Resource not found."
}

{
  "error": "connection_challenge_inactive",
  "message": "Connection challenge is no longer active."
}

{
  "error": "connection_challenge_expired",
  "message": "Verification code expired. Start again."
}

{
  "error": "login_failed",
  "message": "Login failed. Check credentials and try again."
}

{
  "error": "rate_limit_exceeded",
  "message": "Too many requests. Try again later.",
  "retryAfter": 60
}

{
  "error": "service_unavailable",
  "message": "Service temporarily unavailable. Try again later."
}

POST

account-connection-challenges

{id}

submit

X Account Email Verification API & Login Challenges

curl --request POST \
  --url https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit \
  --header 'Content-Type: <content-type>' \
  --header 'x-api-key: <api-key>' \
  --data '
{
  "email_code": "<string>"
}
'

import requests

url = "https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit"

payload = { "email_code": "<string>" }
headers = {
    "x-api-key": "<api-key>",
    "Content-Type": "<content-type>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'x-api-key': '<api-key>', 'Content-Type': '<content-type>'},
  body: JSON.stringify({email_code: '<string>'})
};

fetch('https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit"

	payload := strings.NewReader("{\n  \"email_code\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-key", "<api-key>")
	req.Header.Add("Content-Type", "<content-type>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "id": "<string>",
  "xUsername": "<string>",
  "xUserId": "<string>",
  "status": "<string>",
  "health": "<string>",
  "createdAt": "<string>",
  "object": "<string>",
  "expiresAt": "<string>",
  "message": "<string>",
  "username": "<string>"
}

Free - does not consume credits

Use this endpoint after Connect X Account returns 202 Email Code Required. Submit the one-time code from the account email inbox before expiresAt while the challenge is still active.

This endpoint cannot reopen an expired, failed, completed, or replaced challenge. After 409, 410, or 422, start Connect X Account again for a new account. For an existing account, use Re-authenticate X Account with the current password and any required TOTP secret key.

Use the returned challenge ID

Keep the id from the 202 response and submit the inbox code to that challenge. The challenge belongs to the same pending login attempt.

Enter the account email code

Use the one-time code X sent to the account email inbox. Xquik strips spaces before submission, so 123 456 and 123456 are handled the same way.

Handle another code prompt

If X asks for a new email code, this endpoint returns 202 again. Keep the same flow open and submit the next inbox code before expiresAt.

Start over when stale

410 means the code expired. 409 means the challenge was already completed, failed, expired, or replaced. Start Connect X Account again for a new account, or use Re-authenticate X Account for an existing account.

The dashboard follows the same flow: it keeps the pending row open, asks for the email code, accepts a new 202 prompt if X asks again, and refreshes the account list after the 201 response.

curl -X POST https://xquik.com/api/v1/x/account-connection-challenges/xch_8vGd8Y9JvH6dV0xA/submit \
  -H "x-api-key: xq_YOUR_KEY_HERE" \
  -H "Content-Type: application/json" \
  -d '{ "email_code": "123456" }' | jq

const response = await fetch(
  "https://xquik.com/api/v1/x/account-connection-challenges/xch_8vGd8Y9JvH6dV0xA/submit",
  {
    method: "POST",
    headers: {
      "x-api-key": "xq_YOUR_KEY_HERE",
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ email_code: "123456" }),
  },
);
const data = await response.json();

import requests

response = requests.post(
    "https://xquik.com/api/v1/x/account-connection-challenges/xch_8vGd8Y9JvH6dV0xA/submit",
    headers={"x-api-key": "xq_YOUR_KEY_HERE"},
    json={"email_code": "123456"},
)
data = response.json()

package main

import (
    "bytes"
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    body, _ := json.Marshal(map[string]string{
        "email_code": "123456",
    })

    req, err := http.NewRequest(
        "POST",
        "https://xquik.com/api/v1/x/account-connection-challenges/xch_8vGd8Y9JvH6dV0xA/submit",
        bytes.NewReader(body),
    )
    if err != nil {
        panic(err)
    }
    req.Header.Set("x-api-key", "xq_YOUR_KEY_HERE")
    req.Header.Set("Content-Type", "application/json")

    resp, err := http.DefaultClient.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    var data map[string]interface{}
    if err := json.NewDecoder(resp.Body).Decode(&data); err != nil {
        panic(err)
    }
    fmt.Println(data)
}

Headers

string

required

Your API key. Session cookie authentication is also supported. Generate a key from the dashboard.

string

required

Must be application/json.

Path Parameters

string

required

Challenge ID returned by Connect X Account.

Body

string

required

Email verification code for the pending connection. Codes from 4 to 64 characters are accepted. Spaces are stripped before submission.

Response

201 Created

string

Unique account ID.

string

Connected X username.

string

X user ID.

string

Account connection status (e.g. "active").

string

Derived login/cookie health. One of healthy, locked, needsReauth, recovering, suspended, temporaryIssue. See Account health for meanings.

string

ISO 8601 timestamp of when the account was connected.

{
  "id": "3",
  "xUsername": "elonmusk",
  "xUserId": "44196397",
  "status": "active",
  "health": "healthy",
  "createdAt": "2026-02-20T08:15:00.000Z"
}

202 Email Code Required

string

Always x_account_connection_challenge.

string

Challenge ID to submit with the next email verification code.

string

Always requires_email_code.

string

ISO 8601 expiration time for the challenge.

string

Human-readable next step.

string

X username being connected.

{
  "object": "x_account_connection_challenge",
  "id": "xch_8vGd8Y9JvH6dV0xA",
  "status": "requires_email_code",
  "expiresAt": "2026-05-08T12:10:00Z",
  "message": "Enter the email verification code to continue.",
  "username": "elonmusk"
}

The connection still needs a valid email code. Submit the new code to the same endpoint.

400 Invalid Input

{ "error": "invalid_input", "message": "Invalid input. Check the request body." }

Missing email_code, invalid JSON, or a code outside the accepted length.

401 Unauthenticated

{ "error": "unauthenticated", "message": "Missing or invalid API key" }

Missing or invalid API key.

404 Not Found

{ "error": "connection_challenge_not_found", "message": "Connection challenge not found." }

The challenge ID does not exist or does not belong to the authenticated user.

409 Conflict

{ "error": "connection_challenge_inactive", "message": "Connection challenge is no longer active." }

The challenge was already completed, failed, expired, or replaced.

410 Expired

{ "error": "connection_challenge_expired", "message": "Verification code expired. Start again." }

Start a new account connection to receive a fresh challenge.

{ "error": "login_failed", "message": "Login failed. Check credentials and try again." }

The code or account login state was rejected. Start a new connection if the account requires fresh credentials.

429 Rate Limit Exceeded

{ "error": "rate_limit_exceeded", "message": "Too many requests. Try again later.", "retryAfter": 60 }

Wait for the Retry-After header before retrying.

503 Service Unavailable

{ "error": "service_unavailable", "message": "Service temporarily unavailable. Try again later." }

Retry after a short delay.

Related: Connect X Account starts the challenge, and List X Accounts verifies the account after connection.

{
  "id": "42",
  "xUserId": "9876543210",
  "xUsername": "elonmusk",
  "status": "active",
  "health": "healthy",
  "createdAt": "2025-01-15T12:00:00Z"
}

{
  "object": "x_account_connection_challenge",
  "id": "xch_8vGd8Y9JvH6dV0xA",
  "status": "requires_email_code",
  "expiresAt": "2026-05-08T12:10:00Z",
  "message": "Enter the email verification code to continue.",
  "username": "elonmusk"
}

{
  "error": "invalid_input",
  "message": "Invalid input. Check the request body."
}

{
  "error": "unauthenticated",
  "message": "Authentication required. Provide a valid API key or bearer token."
}

{
  "error": "not_found",
  "message": "Resource not found."
}

{
  "error": "connection_challenge_inactive",
  "message": "Connection challenge is no longer active."
}

{
  "error": "connection_challenge_expired",
  "message": "Verification code expired. Start again."
}

{
  "error": "login_failed",
  "message": "Login failed. Check credentials and try again."
}

{
  "error": "rate_limit_exceeded",
  "message": "Too many requests. Try again later.",
  "retryAfter": 60
}

{
  "error": "service_unavailable",
  "message": "Service temporarily unavailable. Try again later."
}

X Account Email Verification API & Login Challenges

curl --request POST \
  --url https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit \
  --header 'Content-Type: <content-type>' \
  --header 'x-api-key: <api-key>' \
  --data '
{
  "email_code": "<string>"
}
'

import requests

url = "https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit"

payload = { "email_code": "<string>" }
headers = {
    "x-api-key": "<api-key>",
    "Content-Type": "<content-type>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'x-api-key': '<api-key>', 'Content-Type': '<content-type>'},
  body: JSON.stringify({email_code: '<string>'})
};

fetch('https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://xquik.com/api/v1/x/account-connection-challenges/{id}/submit"

	payload := strings.NewReader("{\n  \"email_code\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-key", "<api-key>")
	req.Header.Add("Content-Type", "<content-type>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "id": "<string>",
  "xUsername": "<string>",
  "xUserId": "<string>",
  "status": "<string>",
  "health": "<string>",
  "createdAt": "<string>",
  "object": "<string>",
  "expiresAt": "<string>",
  "message": "<string>",
  "username": "<string>"
}

Overview

X API

X Write

Trends

Radar

Account

API Keys

Guest Wallets

Credits

X Accounts

Monitors

Events

Webhooks

Draws

Extractions

Compose

Drafts

Styles

Support

X Account Email Verification API & Login Challenges

Use the returned challenge ID

Enter the account email code

Handle another code prompt

Start over when stale

Headers

Path Parameters

Body

Response

201 Created

202 Email Code Required

400 Invalid Input

401 Unauthenticated

404 Not Found

409 Conflict

410 Expired

429 Rate Limit Exceeded

503 Service Unavailable

​Continue the pending login

Use the returned challenge ID

Enter the account email code

Handle another code prompt

Start over when stale

​Headers

​Path Parameters

​Body

​Response

​201 Created

​202 Email Code Required

​400 Invalid Input

​401 Unauthenticated

​404 Not Found

​409 Conflict

​410 Expired

​422 Login Failed

​429 Rate Limit Exceeded

​503 Service Unavailable

Continue the pending login

Headers

Path Parameters

Body

Response

201 Created

202 Email Code Required

400 Invalid Input

401 Unauthenticated

404 Not Found

409 Conflict

410 Expired

422 Login Failed

429 Rate Limit Exceeded

503 Service Unavailable