OTP (verification codes)
OTP status
GET
/v2/otp/{otpId}- Scope:
otp - Idempotency-Key:not used
- read only
pending | verified | expired | locked | failed.
Parameters
Path
| Name | Type | Constraints | Description |
|---|---|---|---|
otpIdrequired | Typestring | Constraints— | DescriptionOTP id returned by POST /v2/otp. |
Headers
| Name | Type | Constraints | Description |
|---|---|---|---|
X-Request-Idoptional | Typestring | Constraints— | DescriptionOptional: your own request id, echoed back (otherwise we generate req_…). Quote it to support. |
Request
curl -X GET "https://mursilat.com/api/v2/otp/otp_8f2c1d9a7b3e4f56a1b2c3d4" \
-H "Authorization: Bearer $WASLA_API_KEY"const res = await fetch('https://mursilat.com/api/v2/otp/otp_8f2c1d9a7b3e4f56a1b2c3d4', {
method: 'GET',
headers: {
Authorization: `Bearer ${process.env.WASLA_API_KEY}`,
},
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.error.code}: ${data.error.message}`);
console.log(data);import os
import requests
headers = {"Authorization": f"Bearer {os.environ['WASLA_API_KEY']}"}
res = requests.get(
"https://mursilat.com/api/v2/otp/otp_8f2c1d9a7b3e4f56a1b2c3d4",
headers=headers,
timeout=30,
)
data = res.json()
if not res.ok:
raise RuntimeError(f"{data['error']['code']}: {data['error']['message']}")
print(data)<?php
$ch = curl_init('https://mursilat.com/api/v2/otp/otp_8f2c1d9a7b3e4f56a1b2c3d4');
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => 'GET',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Authorization: Bearer ' . getenv('WASLA_API_KEY'),
],
]);
$data = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($status >= 400) { throw new Exception($data['error']['code'] . ': ' . $data['error']['message']); }
print_r($data);Response
200Example
{
"otpId": "otp_8f2c1d9a7b3e4f56a1b2c3d4",
"numberId": "cm1abcd2345efgh6789ijkl",
"to": "2010****4567",
"status": "verified",
"attempts": 1,
"maxAttempts": 5,
"attemptsLeft": 0,
"expiresAt": "…",
"verifiedAt": "…",
"createdAt": "…",
"messageId": "3EB0…"
}Response schema
Fields of the example answer. Expand objects and arrays.
responseobject11 fields
- otpIdstring "otp_8f2c1d9a7b3e4f56a1b2c3d4"
- numberIdstring "cm1abcd2345efgh6789ijkl"
- tostring "2010****4567"
- statusstring "verified"
- attemptsinteger 1
- maxAttemptsinteger 5
- attemptsLeftinteger 0
- expiresAtstring "…"
- verifiedAtstring "…"
- createdAtstring "…"
- messageIdstring "3EB0…"
Errors
Only the common authentication, rate-limit and validation errors.
Try it
Send this request from your browser to the Mursilat API.
documented examplePreview — this copy of the docs isn’t on mursilat.com, so the console shows the documented example instead of calling the API.
Real requests use your real number and plan: they can send WhatsApp messages, spend quota and delete data. (read only)
Kept only in this tab’s memory: never saved, never put in the URL, sent only to mursilat.com. Reloading the page forgets it.