---
title: "Validate OTP"
method: POST
path: "/auth/v1/web/otp/validate"
---

# Validate OTP

`POST /auth/v1/web/otp/validate`

Validates the OTP generated through the `/otp/generate` API.

## Request body

- object
  - `identifierType` string, required — Identifier used for token generation. Values: MOBILE, EMAIL, USERNAME.
  - `identifierValue` string, required — Value of the specified identifierType.
  - `brand` string, required — Name of the brand/org for which authentication needs to be verified.
  - `deviceId` string, required — Unique ID of the device from which the customer has generated the token.
  - `sessionId` string, required — Session ID generated through the `v1/token/generate` API.
  - `otp` string, required — Validation code received by the customer.

## Response `200`

200

- object
  - `status` object
    - `success` boolean
    - `code` integer
    - `message` string
  - `auth` object
    - `token` string
    - `key` string
  - `user` object
    - `appRegistered` boolean
    - `sessionId` unknown
    - `role` string
    - `userRegisteredForPassword` boolean

## Other responses

- `400` — 400

---

[API](https://skmtc.net/capillarytech/apis/sample-api.md) · [All operations](https://skmtc.net/capillarytech/apis/sample-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/capillarytech/sample-api/revisions/de241f2ed9b3/schema)