---
title: "Verify challenge"
method: POST
path: "/verify"
tags: ["verify", "sms", "email"]
---

# Verify challenge

`POST /verify`

Verify an SMS or email-based challenge by submitting a verification code.

## Request body

- object
  - `challengeId` string, required — The ID of the challenge.
  - `verificationCode` string, required — The verification code submitted by the user.

## Response `200`

OK

- object
  - `isVerified` boolean, required — True if the verification code is valid.
  - `verificationMethod` 'SMS' | 'EMAIL_OTP' | 'WHATSAPP' — The verification method used for the challenge if successful.
  - `phoneNumber` string — The phone number for which the challenge was initiated. Only present if verification is successful and the verification method is 'SMS' or 'WHATSAPP'.
  - `email` string — The email address for which the challenge was initiated. Only present if verification is successful and the verification method is 'EMAIL_OTP'.
  - `failureReason` 'CODE_INVALID_OR_EXPIRED' | 'MAX_ATTEMPTS_EXCEEDED'

## Other responses

- `400` — Invalid Request
- `401` — Unauthorized

---

[API](https://skmtc.dev/authsignal/apis/call-connect-api.md) · [All operations](https://skmtc.dev/authsignal/apis/call-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/authsignal/call-connect-api/revisions/5604d744e3ad/schema)