---
source_url: "https://www.turalogin.com/?utm_source=openai"
title: "TuraLogin - Passwordless auth, two API calls"
mirrored_at: 2026-08-09T13:01:42.863Z
host: www.turalogin.com
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/www.turalogin.com/index__q__utm_source_openai"
---

> **Original source:** https://www.turalogin.com/?utm_source=openai

Magic links as a service.  
You keep the session.

We send the login email, secure the tokens, and verify the user. You make two API calls and create the session. No SMTP, token storage, or frontend SDK to build on your side.

This site runs on Turalogin itself

Powering auth at

## How it works

Three steps. Two endpoints. No redirects. No token leakage.

1

Your backend calls `/auth/start` with the user's email. Turalogin sends a login email from our trusted domain.

2

The user clicks the login link or enters the 6-digit code. Whichever is easier on their device.

3

Your backend calls `/auth/verify` server-side, gets the verified email back, and creates your own session.

## Why Turalogin

Auth with a small attack surface. Simple to integrate, hard to get wrong.

## Works with your stack

POST to start. POST to verify. If your stack can make HTTP requests, you're ready.

Next.js

Node.js

Bun/Deno

Python

Ruby

Java

Go

PHP

.NET

Serverless

## Ready to stop building auth?

Sign up, grab your API key, and make your first call. Works on localhost immediately.

Free to start. No credit card required.

Two API calls. Free to start.