Wellfound Login API
Log in to Wellfound with your own account email and password and get back an opaque session blob that the other Wellfound operations (viewer, conversations, applications, application modal, apply, send message) take as input. Your credentials are sent only to Wellfound and are not stored; treat the returned session as a secret. The session is tied to the exit IP it was created on, so pass the same proxyUrl (or none) on every later call. Returns an error if Wellfound rejects the credentials.
Last updated
How to call it
Send one POST to api.upapi.io/wellfound-login.post with your key in the X-Api-Key header and the parameters below as a JSON body. Each call spends 10 weighted units of your monthly quota. The operation times out after 90 seconds. Responses are not cached; every call runs the operation.
POST https://api.upapi.io/wellfound-login.post
Wellfound Login API reference
Request parameters
- stringrequired — Wellfound account email.
- password
- stringrequired — Wellfound account password. Sent only to Wellfound, never stored.
- proxyUrl
- string — Exit to log in from. Omit to send directly. The session is bound to this exit, so every later call must pass the SAME value.
- impersonate
- string — curl_cffi browser-impersonation target.
Response fields
- session
- stringrequired — Opaque authenticated blob. Treat it as a credential: never log it and never store it in the clear.
- viewerId
- string — Wellfound user id, empty when the follow-up viewer read did not answer.
- elapsedMs
- integer
- operationCount
- integerrequired — Persisted queries discovered in the bundle.
Example request and response
The example response is generated from this operation’s published output schema — it shows the shape and field names, not values from a recorded call.
{
"email": "test@example.com",
"password": "example",
"impersonate": "chrome146"
}{
"session": "example",
"viewerId": "",
"elapsedMs": 0,
"operationCount": 1
}Code snippets
cURL
curl -X POST https://api.upapi.io/wellfound-login.post \
-H 'Content-Type: application/json' \
-H 'x-api-key: YOUR_API_KEY' \
-d '{ "email": "test@example.com", "password": "example", "impersonate": "chrome146" }'JavaScript
const response = await fetch('https://api.upapi.io/wellfound-login.post', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'x-api-key': 'YOUR_API_KEY',
},
body: JSON.stringify({
"email": "test@example.com",
"password": "example",
"impersonate": "chrome146"
}),
});
const data = await response.json();
console.log(data);Python
import requests
response = requests.post(
'https://api.upapi.io/wellfound-login.post',
headers={
'Content-Type': 'application/json',
'x-api-key': 'YOUR_API_KEY',
},
json={
"email": "test@example.com",
"password": "example",
"impersonate": "chrome146"
},
)
print(response.json())Go
package main
import (
"bytes"
"encoding/json"
"fmt"
"io"
"net/http"
)
func main() {
payload := []byte(`{ "email": "test@example.com", "password": "example", "impersonate": "chrome146" }`)
req, _ := http.NewRequest("POST", "https://api.upapi.io/wellfound-login.post", bytes.NewBuffer(payload))
req.Header.Set("Content-Type", "application/json")
req.Header.Set("x-api-key", "YOUR_API_KEY")
client := &http.Client{}
resp, err := client.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
var result map[string]any
json.Unmarshal(body, &result)
fmt.Println(result)
}PHP
<?php
$payload = json_encode([
'email' => 'test@example.com',
'password' => 'example',
'impersonate' => 'chrome146',
]);
$ch = curl_init('https://api.upapi.io/wellfound-login.post');
curl_setopt_array($ch, [
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => $payload,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
'x-api-key: YOUR_API_KEY',
],
]);
$response = curl_exec($ch);
curl_close($ch);
$data = json_decode($response, true);
var_dump($data);Ruby
require 'net/http'
require 'uri'
require 'json'
uri = URI('https://api.upapi.io/wellfound-login.post')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == 'https'
request = Net::HTTP::Post.new(uri.path)
request['Content-Type'] = 'application/json'
request['x-api-key'] = 'YOUR_API_KEY'
request.body = { "email": "test@example.com", "password": "example", "impersonate": "chrome146" }.to_json
response = http.request(request)
puts JSON.parse(response.body)Java
import okhttp3.*;
import com.fasterxml.jackson.databind.ObjectMapper;
import java.util.Map;
OkHttpClient client = new OkHttpClient();
ObjectMapper mapper = new ObjectMapper();
String json = "{ \"email\": \"test@example.com\", \"password\": \"example\", \"impersonate\": \"chrome146\" }";
RequestBody body = RequestBody.create(json, MediaType.get("application/json"));
Request request = new Request.Builder()
.url("https://api.upapi.io/wellfound-login.post")
.post(body)
.addHeader("Content-Type", "application/json")
.addHeader("x-api-key", "YOUR_API_KEY")
.build();
try (Response response = client.newCall(request).execute()) {
Map<?, ?> result = mapper.readValue(response.body().string(), Map.class);
System.out.println(result);
}C#
using System.Net.Http;
using System.Net.Http.Json;
using System.Text.Json;
using var client = new HttpClient();
client.DefaultRequestHeaders.Add("x-api-key", "YOUR_API_KEY");
var payload = JsonSerializer.Deserialize<object>("{ \"email\": \"test@example.com\", \"password\": \"example\", \"impersonate\": \"chrome146\" }");
var response = await client.PostAsJsonAsync("https://api.upapi.io/wellfound-login.post", payload);
var result = await response.Content.ReadFromJsonAsync<JsonElement>();
Console.WriteLine(result);Frequently asked questions
How much does the Wellfound Login API cost per call?
Each call spends 10 weighted units of your plan's monthly quota. Full pricing is at https://upapi.io/pricing.
How do I authenticate to the Wellfound Login API?
Send your key in the X-Api-Key header. A free guest key is available without creating an account.
Are Wellfound Login API responses cached?
No — every call runs the operation live; responses are not cached.