---
title: "OTP delivery callback from a messaging provider"
method: POST
path: "/v1/webhooks/otp/{provider}"
tags: ["Webhooks"]
---

# OTP delivery callback from a messaging provider

`POST /v1/webhooks/otp/{provider}`

## Request

- Base URL: `https://api.hify.club`
- URL: `https://api.hify.club/v1/webhooks/otp/{provider}`
- Auth: API key in header `X-User-Token`

Unauthenticated; the provider signs nothing, so the X-Callback-Token header must match the provider's callback token. A failed delivery marks the login attempt otp_delivery_failed with the provider's reason; other events are logged.

## Path parameters

- `provider` string, required

## Headers

- `X-Callback-Token` string, required

## Request body

- object: The provider's event payload as it posts it

## Response `200`

Event accepted

- object
  - `status` string

## Other responses

- `400`: Body is not JSON
- `404`: Unknown provider or wrong token

---

[API](https://skmtc.dev/hify/apis/hify-apis.md) - [All operations](https://skmtc.dev/hify/apis/hify-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/hify/apis/hify-apis/revisions/b5920403538d?raw)