---
title: "Email a one-time verification code (unauthenticated)"
method: POST
path: "/public/access-requests/start"
tags: ["access-requests"]
---

# Email a one-time verification code (unauthenticated)

`POST /public/access-requests/start`

## Request

- Base URL: `https://api.onplana.com/api`
- URL: `https://api.onplana.com/api/public/access-requests/start`
- Auth: one of:
  - HTTP bearer
  - API key in header `Authorization`

Captcha-gated where a captcha is configured. ALWAYS answers { sent: true }, whether or not the resource is requestable or the address deliverable, with the same timing, so neither is an oracle. The code (6 digits, 15-minute TTL, single-use, resend-throttled) proves control of the email before anything can reach a decider's inbox.

## Request body

- object
  - `resourceType` 'PROJECT' | 'PAGE' | 'LIBRARY' | 'TABLE', required
  - `resourceId` string, required
  - `email` string, email, required
  - `captchaToken` string

## Response `200`

{ sent: true } unconditionally

## Other responses

- `400`: Validation error

---

[API](https://skmtc.dev/onplana/apis/onplana-api.md) · [All operations](https://skmtc.dev/onplana/apis/onplana-api/llms.txt) · [OpenAPI document](https://skmtc.dev/onplana/apis/onplana-api/revisions/c3d6c89e9dc8?raw)