Msg91
OTP Widget

OTP Widget

These APIs enable the integration of OTP-based authentication (via Msg91’s Widget) for both mobile numbers and email addresses. They support sending, retrying, and verifying OTPs, as well as validating access tokens.

📌 Notes

  • All endpoints use the POST method.

  • widgetId refers to the unique Widget ID configured in your Msg91 dashboard.

  • Always securely store the Authkey and access-token.

  • reqId is required for retrying and verifying OTPs; it is returned in the response of the Send OTP API.

  • The retryChannel is optional if only one retry method is configured in the widget.

🧪 Example Flow

  1. Send OTP → Get reqId

  2. Retry OTP (optional) → Use reqId

  3. Verify OTP → Get JWT access-token

  4. Verify access-token → Get verified user information

Note: Captcha validations and invisible OTP are not supported.