---
title: "Verify PIN"
method: POST
path: "/v1/one-time-token/pin/verify"
tags: ["sca-pin"]
deprecated: true
---

# Verify PIN

`POST /v1/one-time-token/pin/verify`

> **Deprecated.**

[{% img src="https://img.shields.io/badge/jose-direct_encryption-blue" /%}](/guides/developer/auth-and-security/jose-jwe){% .d-inline-block %}

To clear a **PIN** challenge listed in a OTT.

Notes:
1. User is required to [create pin](/api-reference/user-security/usersecuritypincreate) before the verification can be successful.
2. Rate limit may be applied if there are 5 continuous unsuccessful attempts and OTT creation will be blocked for 15 minutes.

## Headers

- `One-Time-Token` string, required
- `Accept` 'application/jose+json', required
- `X-TW-JOSE-Method` 'jwe', required
- `X-External-Correlation-Id` string, uuid

## Response `200`

Encrypted one time token status.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)