---
title: "Send a mobile signup verification code"
method: POST
path: "/api/v3/auth/mobile/verification-code"
tags: ["Mobile Authentication"]
---

# Send a mobile signup verification code

`POST /api/v3/auth/mobile/verification-code`

## Request

- Base URL: `https://api.endless.health` (the document declares no server; this is the origin it was published from)
- URL: `https://api.endless.health/api/v3/auth/mobile/verification-code`
- Auth: none declared

Emails a six-digit code for the second signup step. Serves both the first send and every resend, refusing to issue another within 45 seconds of the last one. Always reports sent=true so the endpoint cannot be used to discover which addresses have an account; cooldown_seconds is the time left before a resend will be honored.

## Request body

- MobileVerificationCodeRequestSchema: Sends a verification code. Used for both the first send and resends.
  - `email` string, email, required
  - `site_id` integer, required
  - `locale` 'en' | 'es'

## Response `200`

Successful Response

- MobileVerificationCodeResponseSchema: Response for POST /auth/mobile/verification-code (step 2 send / resend). `sent` is always True so the client cannot tell whether the address resolved to a user. `cooldown_seconds` is the client-side resend timer; the route still enforces cooldown from the previous token's created_at.
  - `sent` boolean
  - `cooldown_seconds` integer

## Other responses

- `404`: Not found
- `422`: Validation Error

---

[API](https://skmtc.dev/endless/apis/eh-core-v3-api-prod.md) - [All operations](https://skmtc.dev/endless/apis/eh-core-v3-api-prod/llms.txt) - [OpenAPI document](https://skmtc.dev/endless/apis/eh-core-v3-api-prod/revisions/9046a1eb2d0c?raw)