---
title: "Verify a phone OTP code"
method: POST
path: "/v1/phone/verify-otp"
tags: ["phone"]
---

# Verify a phone OTP code

`POST /v1/phone/verify-otp`

## Request

- Base URL: `https://api.getmyhotels.com`
- URL: `https://api.getmyhotels.com/v1/phone/verify-otp`
- Auth: none declared

Runs `phone.verifyOtp` (public). Checks the 6-digit code for `verificationPublicId`; the verified phone is bound to a profile only when the same bearer session was present for both the OTP request and verification. Codes expire after 10 minutes and lock after 5 failed attempts.

## Request body

- object
  - `verificationPublicId` string, required
  - `code` string, required

## Response `200`

Success

- unknown

## Other responses

- `400`: Request validation failed or the router rejected the input
- `426`: Reported X-GMH-App-Version is below the supported minimum — the app must update
- `500`: Unexpected server error (opaque; details stay in logs)

---

[API](https://skmtc.dev/getmyhotels/apis/getmyhotels-rest-api.md) · [All operations](https://skmtc.dev/getmyhotels/apis/getmyhotels-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getmyhotels/apis/getmyhotels-rest-api/revisions/cba24a9c13f0?raw)