Comment by hyyypr

Disclaimer: I work there We don't use any APIs, we just get in there with a headless browser (phantom) and mimic the user actions to change his password.