---
title: "Verify a community gate code"
method: POST
path: "/community/verify-code"
---

# Verify a community gate code

`POST /community/verify-code`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/community/verify-code`
- Auth: HTTP bearer

Bot-facing verification. Requires ORGS_ENABLED=true and a Bearer org token with entitlements:read scope. The code is HMAC verified, checked for expiry, then entitlement is checked live before the bot grants access.

## Request body

- object
  - `code` string, required

## Response `200`

Community code decision

- CommunityVerifyCode
  - `ok` boolean, required
  - `allowed` boolean, required
  - `entitled` boolean, required
  - `status` 'free' | 'entitled' | 'payment_required', required
  - `owner` string, required
  - `repo` string, required
  - `version` string, required
  - `subject_type` 'user' | 'wallet' | 'org', required
  - `subject_id` string, required
  - `pricing` object, required

## Other responses

- `400`: Bad request
- `401`: Authorization required
- `403`: Authorization was provided but is not allowed for this action
- `404`: Resource not found
- `410`: Community code expired

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)