Unified Auth
Google SSO, Microsoft SSO, and magic link — one auth system for all SM products. Session cookie on .sprintmode.ai works across all portals.
SM API & @sprintmode/ui — the technical reference for building on the Sprint Mode platform.
Sprint Mode is a platform. Every product — Studios, Mode, Hub, Sprint Capital, PrivacyAI — is a tenant of SM infrastructure.
SM API (api.sprintmode.ai) is the backend contract. All data, auth, connectors, and campaigns live here.
@sprintmode/ui is the frontend contract. React components, CSS design tokens, auth helpers, and the login page.
Products call SM API and import @sprintmode/ui. They never rebuild auth, portals, sidebars, CRM, campaign engines, or connectors.
All SM API routes are served from:
https://api.sprintmode.aiMost routes require one of:
| Method | How |
|---|---|
| CF Access (User) | Browser session via Google/Microsoft SSO. Header: cf-access-authenticated-user-email |
| CF Access (Service Token) | Server-to-server. Headers: CF-Access-Client-Id + CF-Access-Client-Secret |
| API Key | Header: X-SM-Key: <key> or Authorization: Bearer <key> |
Public routes (SSO callbacks, magic link) bypass auth. See Authentication for full details.