These APIs enable the integration of OTP-based authentication (via Msg91’s Widget) for both mobile numbers and email addresses. They support sending, retrying, and verifying OTPs, as well as validating access tokens.

📌 Notes

• All endpoints use the POST method.

• widgetId refers to the unique Widget ID configured in your Msg91 dashboard.

• Always securely store the Authkey and access-token.

• reqId is required for retrying and verifying OTPs; it is returned in the response of the Send OTP API.

• The retryChannel is optional if only one retry method is configured in the widget.

🧪 Example Flow

1. Send OTP → Get reqId

2. Retry OTP (optional) → Use reqId

3. Verify OTP → Get JWT access-token

4. Verify access-token → Get verified user information

Note: Captcha validations and invisible OTP are not supported.