curl --request POST \
--url https://api.mnemom.ai/v1/auth/cli-exchange \
--cookie mnemom_session={
"access_token": "<string>",
"refresh_token": "<string>",
"expires_in": 123,
"user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"user_email": "jsmith@example.com"
}One-shot endpoint called by the SPA during the CLI login flow (browser → localhost handoff). Requires a valid mnemom_session. Returns access + refresh tokens in the JSON body. Does not modify cookies.
curl --request POST \
--url https://api.mnemom.ai/v1/auth/cli-exchange \
--cookie mnemom_session={
"access_token": "<string>",
"refresh_token": "<string>",
"expires_in": 123,
"user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"user_email": "jsmith@example.com"
}HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".