---
title: "Send a 6-digit sign-in code to an e-mail, or tell the browser to run phone OTP"
method: POST
path: "/api/auth/code/start"
tags: ["auth"]
---

# Send a 6-digit sign-in code to an e-mail, or tell the browser to run phone OTP

`POST /api/auth/code/start`

## Request

- Base URL: `https://api.wizbi.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.wizbi.ai/api/auth/code/start`
- Auth: none declared

## Request body

- AuthCodeStartBody
  - `identifier` string, required
  - `lang` 'he' | 'en' | 'pt'
  - `preferCode` boolean

## Response `200`

Accepted (generic — never reveals whether the address is allowed).

- AuthCodeStartResponse
  - `method` 'email' | 'phone' | 'sso' | 'methods', required
  - `providerId` string
  - `protocol` 'saml' | 'oidc'
  - `preset` 'entra' | 'google_workspace' | 'oidc' | 'saml'
  - `required` boolean
  - `allowed` string[]

## Other responses

- `400`: Not an e-mail or a phone.
- `429`: Rate limited.
- `503`: Outbound mail is not configured.

---

[API](https://skmtc.dev/wizbi/apis/wizbi-core-api.md) · [All operations](https://skmtc.dev/wizbi/apis/wizbi-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wizbi/apis/wizbi-core-api/revisions/5a47416c82ec?raw)