---
title: "Prove the code and file the request (unauthenticated)"
method: POST
path: "/public/access-requests/verify"
tags: ["access-requests"]
---

# Prove the code and file the request (unauthenticated)

`POST /public/access-requests/verify`

## Request

- Base URL: `https://api.onplana.com/api`
- URL: `https://api.onplana.com/api/public/access-requests/verify`
- Auth: one of:
  - HTTP bearer
  - API key in header `Authorization`

A correct code files an ExternalAccessRequest and notifies the deciders. Wrong-code feedback is safe here (the code went only to the address's holder) and bounded by a brute-force lockout (429 LOCKED). 400 INVALID_CODE otherwise; 429 RESOURCE_CAP at 25 pending external asks per resource. Requests expire after 14 days like internal ones.

## Request body

- object
  - `resourceType` 'PROJECT' | 'PAGE' | 'LIBRARY' | 'TABLE', required
  - `resourceId` string, required
  - `email` string, email, required
  - `code` string, required: The 6-digit code from the email.
  - `note` string

## Response `200`

{ requested: true, alreadyPending }

## Other responses

- `400`: Validation error

---

[API](https://skmtc.dev/onplana/apis/onplana-api.md) · [All operations](https://skmtc.dev/onplana/apis/onplana-api/llms.txt) · [OpenAPI document](https://skmtc.dev/onplana/apis/onplana-api/revisions/c3d6c89e9dc8?raw)