---
title: "Verify code"
method: POST
path: "/auth/email-code/verify"
tags: ["Auth"]
---

# Verify code

`POST /auth/email-code/verify`

Verify a 6-digit code and receive a short-lived session token (valid for 15 minutes).

## Request body

- AuthCodeVerifyRequest
  - `email` string, email, required
  - `code` string, required

## Response `200`

Session token.

- object
  - `data` SessionToken
    - `token` string — Session token starting with owt_
    - `expires_at` string, date-time

## Other responses

- `400` — Invalid or expired code.
- `429` — Too many attempts.

---

[API](https://skmtc.dev/openwhispr/apis/openwhispr-api.md) · [All operations](https://skmtc.dev/openwhispr/apis/openwhispr-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/openwhispr/openwhispr-api/revisions/d1578f9ae6e5/schema)