WhatsApp OTP with one API call
Your users get their sign up, login or checkout code on WhatsApp instead of SMS. You call one endpoint to send and one to check. Inboxi makes the code, sends it, keeps it safe and tells you if it matches.
How it works
- Install OTP Hub: Open Settings, then Apps, in your Inboxi account and install OTP Hub.
- Create a key: Make an API key on the OTP Hub page. It can only send and check codes.
- Send: Your server calls POST /api/v1/otp/send with the phone number. A 6 digit code goes out on WhatsApp with a copy code button.
- Check: Your server calls POST /api/v1/otp/verify with the code the user typed and gets back whether it is valid.
What we handle for you
- The code: We generate it and store only a hash of it, so nobody can read it back.
- Expiry and attempts: A code expires after 10 minutes and allows 5 tries.
- Abuse limits: A phone gets at most 5 codes an hour, with a short wait between two codes, and your workspace has a daily cap you can change.
- Countries: You can allow only the countries you sell in, so numbers from anywhere else are refused.
- Repeats: Send an Idempotency-Key and a retried request returns the first code instead of sending a second one.
- Failed messages: If WhatsApp reports a message as failed, its charge goes back to your wallet.
Which number sends the code
By default codes go from Inboxi's verified WhatsApp number, so you need no number, no template and no Meta approval of your own. You can also send from your own connected WhatsApp number: we create the verification template on it, and once Meta approves it your users see your business as the sender and Meta bills your account directly.
What it costs
From Inboxi's number, every code costs the same $0.10 whatever the country, paid from your Inboxi wallet. From your own number, OTP Hub charges nothing and Meta bills you its own rate. Test mode is free: it sends nothing and returns the code, so you can build and test your flow first.
Questions
Why WhatsApp instead of SMS?
Most of your users in the Gulf already have WhatsApp open, the code arrives with a copy button, and one price works for every country.
Does the message show my business name?
From Inboxi's number the sender is OTP Hub and the text is Meta's standard verification message. To show your own name, send from your own WhatsApp number.
Does it work with Salla?
Yes. When OTP Hub sends from Inboxi's number, your Salla login codes go through it too.
Where is the documentation?
The full API reference, with examples in cURL, JavaScript, Python and PHP, is in the Inboxi documentation under Apps.
Send your first code
Open an Inboxi account, install OTP Hub and try it in test mode for free.