Start Verification

Send an SMS OTP to a phone number to begin the verification process.

POST/v2/accounts/{sid}/verifications/sms

Endpoint

POST https://exoverify.exotel.com/v2/accounts/{account_sid}/verifications/sms

Headers

Header	Value
Authorization	Basic <base64(Application_ID:Application_Secret)>
Content-Type	application/json

Request Parameters

Parameter	Required	Type	Description
application_id	Mandatory	String	Your ExoVerify SMS App ID
phone_number	Mandatory	String	Phone number to verify (E.164 format)
replace_vars	Optional	Array	Array of strings for template variable substitution

Code Examples

cURL

curl -X POST "https://exoverify.exotel.com/v2/accounts/<account_sid>/verifications/sms" \
  -H "Authorization: Basic <base64_credentials>" \
  -H "Content-Type: application/json" \
  -d '{
    "application_id": "your_app_id",
    "phone_number": "+919876543210"
  }'

Python

import requests
import base64

credentials = base64.b64encode(b"app_id:app_secret").decode()

response = requests.post(
    "https://exoverify.exotel.com/v2/accounts/<account_sid>/verifications/sms",
    headers={
        "Authorization": f"Basic {credentials}",
        "Content-Type": "application/json"
    },
    json={
        "application_id": "your_app_id",
        "phone_number": "+919876543210"
    }
)

print(response.json())

Node.js

const credentials = Buffer.from('app_id:app_secret').toString('base64');

const response = await fetch(
  'https://exoverify.exotel.com/v2/accounts/<account_sid>/verifications/sms',
  {
    method: 'POST',
    headers: {
      'Authorization': `Basic ${credentials}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      application_id: 'your_app_id',
      phone_number: '+919876543210',
    }),
  }
);

const data = await response.json();
console.log(data);

PHP

<?php
$payload = json_encode(array(
  "application_id" => "your_app_id",
  "phone_number" => "+919876543210"
));

$curl = curl_init();
curl_setopt_array($curl, array(
  CURLOPT_URL => "https://exoverify.exotel.com/v2/accounts/<account_sid>/verifications/sms",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_POST => true,
  CURLOPT_POSTFIELDS => $payload,
  CURLOPT_HTTPHEADER => array(
    "Authorization: Basic <base64_credentials>",
    "Content-Type: application/json"
  ),
));

$response = curl_exec($curl);
curl_close($curl);

echo $response;
?>

Go

package main

import (
    "fmt"
    "io/ioutil"
    "net/http"
    "strings"
)

func main() {
    url := "https://exoverify.exotel.com/v2/accounts/<account_sid>/verifications/sms"
    payload := strings.NewReader(`{
    "application_id": "your_app_id",
    "phone_number": "+919876543210"
  }`)

    req, _ := http.NewRequest("POST", url, payload)
    req.Header.Add("Authorization", "Basic <base64_credentials>")
    req.Header.Add("Content-Type", "application/json")

    res, _ := http.DefaultClient.Do(req)
    defer res.Body.Close()

    body, _ := ioutil.ReadAll(res.Body)
    fmt.Println(string(body))
}

Response

HTTP 200

{
  "verification_id": "ver_abc123def456",
  "phone_number": "+91987654XXXX",
  "application_id": "your_app_id",
  "account_sid": "your_account_sid",
  "max_attempts": 10,
  "expiration_in_seconds": 60,
  "date_created": "2024-01-15T10:30:00Z",
  "date_updated": "2024-01-15T10:30:00Z"
}

Response Fields

Field	Type	Description
verification_id	String	Unique ID — use this to verify the OTP later
phone_number	String	Masked phone number
application_id	String	Your ExoVerify app ID
max_attempts	Integer	Maximum OTP entry attempts allowed (10)
expiration_in_seconds	Integer	OTP validity window (60 seconds)

Error Codes

HTTP	Code	Description
400	1001	Missing mandatory parameter
401	1010	Authentication failed — invalid App ID or Secret
429	1030	Throttle limit exceeded — too many requests

note

The verification_id is required for the next step — Verify OTP. Store it in your session or pass it to your frontend.

Try It