Skip to main content
POST
Check a code

Authorizations

Authorization
string
header
required

Authorization: Bearer

Body

application/json
id
string
required

The id returned by /verify/start.

code
string
required

The code the end user typed. Compared exactly as sent — never trimmed or normalized, so a stray space will not match.

application
string

Partner keys only, same meaning as on /verify/start. A key can only check a code started under the same application.

Response

Verified / Wrong code / Attempts exhausted / Send failed / prior attempts exhausted / Expired / Canceled

verified
boolean
status
string
attempts_remaining
integer