Quickstart The AuthSMS API is a JSON REST API. Every request is authenticated with your personal API key, every response is JSON with a `success` flag, and prices are in USD. Use it to automate account verification for WhatsApp, Telegram, Google and 1,000+ other services across 150+ countries.
1 Pick a country
Ask for offers for wa and choose the cheapest country with stock.
GET /offers2 Buy the number
POST the service and country. Keep the returned id and show phone to the user.
POST /numbers3 Wait for the code
Poll GET /numbers/{id} every few seconds until status is received, or let a webhook call you.
GET /numbers/{id}4 Finish
Call complete when you are done, or cancel within the active window if the code never came (auto-refund happens anyway on expiry).
POST /numbers/{id}/completeAuthentication Create an API key on this page (sign in first). Send it in the X-API-Key header on every request. Keys do not expire; regenerate a key to revoke the old one immediately. Keep the key on your server and never ship it inside a mobile app or browser code.
API key Sign in or create an account to get a personal API key.
curl "https://authsms.net/api/v1/me" -H "X-API-Key: YOUR_API_KEY" Conventions
Format JSON request bodies (Content-Type: application/json) and JSON responses.
Success Every response includes success: true. The HTTP status is 200.
Errors Status 4xx/5xx with success: false, a machine-readable error code and a human message.
Money All prices and balances are USD numbers with up to 4 decimals, e.g. 0.42.
Time Timestamps are ISO 8601 in UTC, e.g. 2026-10-16T18:04:11.000Z.
IDs Number and rental ids are 24-character strings. Keep them; they are what you pass back to the API.
Rate limits Per key: 120 reads/min, 12 purchases/min. Over the limit you get 429 RATE_LIMITED. Number statuses waitingNumber is active and no SMS has arrived yet. Poll GET /numbers/{id} or wait for the webhook. receivedAt least one code arrived. code holds the latest one, messages all of them. completedYou marked the number as done. No more SMS will be delivered. cancelledYou cancelled the number; the price was refunded. auto_cancelledNo SMS arrived before the number expired; the price was refunded automatically.
Examples cURL Node.js Python PHP
Account Who you are and how much you can spend.
Returns your username, email and current balance.
This endpoint takes no parameters.
curl -X GET "https://authsms.net/api/v1/me" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"user": {
"username": "acme",
"email": "dev@acme.io"
},
"balance": 12.5,
"currency": "USD"
} Lightweight balance check. Call it before buying in bulk.
This endpoint takes no parameters.
curl -X GET "https://authsms.net/api/v1/balance" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"balance": 12.5,
"currency": "USD"
} Catalog Countries, services, prices and stock. These endpoints work without an API key.
List countries GET /countriesNo key needed All countries you can buy numbers in. Use id as the country parameter elsewhere.
This endpoint takes no parameters.
curl -X GET "https://authsms.net/api/v1/countries" Example response
{
"success": true,
"countries": [
{
"id": "0",
"name": "Russia"
},
{
"id": "62",
"name": "Turkey"
},
{
"id": "187",
"name": "United States"
}
]
} List services GET /servicesNo key needed Every service (app or website) you can receive codes for. Use code as the service parameter elsewhere.
curl -X GET "https://authsms.net/api/v1/services?country=62" Example response
{
"success": true,
"services": [
{
"code": "wa",
"name": "WhatsApp"
},
{
"code": "tg",
"name": "Telegram"
},
{
"code": "go",
"name": "Google"
}
]
} Current price and stock per country and service. Filter by either or both.
Parameters
servicequery · string
Service code, e.g. wa.
countryquery · string
Country id, e.g. 62.
curl -X GET "https://authsms.net/api/v1/prices?service=wa&country=62" Example response
{
"success": true,
"prices": [
{
"country": "62",
"service": "wa",
"price": 0.42,
"available": 1835
},
{
"country": "187",
"service": "wa",
"price": 0.95,
"available": 412
}
]
} The easiest way to pick a country: every country with stock for one service, sorted by availability. Pass the route back when buying to lock in exactly this offer.
curl -X GET "https://authsms.net/api/v1/offers?service=wa" Example response
{
"success": true,
"offers": [
{
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"available": 1835,
"operator": null,
"route": "rt_8f3a2c1d"
},
{
"country": "187",
"countryName": "United States",
"price": 0.95,
"available": 412,
"operator": null,
"route": "rt_8f3a2c1d"
}
]
} Numbers One-time numbers for receiving verification codes. The full lifecycle: buy, poll or webhook, complete (or cancel).
Reserves a number and charges your balance. The number stays active for the period shown in expiresAt (typically 20 minutes). If no SMS arrives it is refunded automatically.
Parameters
servicebody · string required
Service code from /services, e.g. wa.
countrybody · string required
Country id from /countries, e.g. 62.
routebody · string
Offer route from /offers to buy that exact offer.
operatorbody · string
Mobile operator, when /offers lists one.
Enter the phone in the app you are verifying, then poll GET /numbers/{id} every 3 to 5 seconds or use a webhook.
curl -X POST "https://authsms.net/api/v1/numbers" \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"service":"wa","country":"62"}' Example response
{
"success": true,
"number": {
"id": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"status": "waiting",
"code": null,
"text": null,
"messages": [],
"canRequestAnother": false,
"awaitingAnother": false,
"canReactivate": false,
"canCancel": true,
"expiresAt": "2026-10-16T18:24:00.000Z",
"createdAt": "2026-10-16T18:04:00.000Z"
},
"balance": 12.08
} Get a number (poll for the code) Returns the current state. While the number is active, this call also checks upstream for new messages, so it is the only endpoint you need to poll.
curl -X GET "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"number": {
"id": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"status": "received",
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"messages": [
{
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"sender": "WhatsApp",
"receivedAt": "2026-10-16T18:04:10.000Z"
}
],
"canRequestAnother": true,
"awaitingAnother": false,
"canReactivate": true,
"canCancel": false,
"expiresAt": "2026-10-16T18:24:00.000Z",
"createdAt": "2026-10-16T18:04:00.000Z"
}
} Your numbers, newest first, with pagination.
Parameters
statusquery · string
One of waiting, received, completed, cancelled, auto_cancelled.
servicequery · string
Filter by service code.
countryquery · string
Filter by country id.
pagequery · number
Page number, default 1.
limitquery · number
Items per page, 1 to 100, default 20.
curl -X GET "https://authsms.net/api/v1/numbers?service=wa&country=62" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"numbers": [
{
"id": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"status": "received",
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"messages": [
{
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"sender": "WhatsApp",
"receivedAt": "2026-10-16T18:04:10.000Z"
}
],
"canRequestAnother": true,
"awaitingAnother": false,
"canReactivate": true,
"canCancel": false,
"expiresAt": "2026-10-16T18:24:00.000Z",
"createdAt": "2026-10-16T18:04:00.000Z"
}
],
"pagination": {
"page": 1,
"limit": 20,
"total": 1,
"totalPages": 1,
"hasMore": false
}
} Complete a number POST /numbers/{id}/completeTell us you are done with a number that received a code. Frees the number early; no refund. Safe to call twice.
Parameters
idpath · string required
Number id.
curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/complete" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"number": {
"id": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"status": "completed",
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"messages": [
{
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"sender": "WhatsApp",
"receivedAt": "2026-10-16T18:04:10.000Z"
}
],
"canRequestAnother": false,
"awaitingAnother": false,
"canReactivate": true,
"canCancel": false,
"expiresAt": "2026-10-16T18:24:00.000Z",
"createdAt": "2026-10-16T18:04:00.000Z"
}
} Cancels a number that has not received a code yet and refunds its price. Allowed 3 minutes after purchase.
Parameters
idpath · string required
Number id.
Possible errors
curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/cancel" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"refund": 0.42,
"balance": 12.5,
"number": {
"id": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"status": "cancelled",
"code": null,
"text": null,
"messages": [],
"canRequestAnother": false,
"awaitingAnother": false,
"canReactivate": false,
"canCancel": false,
"expiresAt": null,
"createdAt": "2026-10-16T18:04:00.000Z"
}
} For a number that already received a code: ask for one more SMS on the same number (for example a second verification step). For a waiting number: ask the upstream network to resend. Watch awaitingAnother and messages.
Parameters
idpath · string required
Number id.
Possible errors
curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/resend" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"awaitingAnother": true,
"number": {
"id": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.42,
"status": "received",
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"messages": [
{
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"sender": "WhatsApp",
"receivedAt": "2026-10-16T18:04:10.000Z"
}
],
"canRequestAnother": false,
"awaitingAnother": true,
"canReactivate": true,
"canCancel": false,
"expiresAt": "2026-10-16T18:24:00.000Z",
"createdAt": "2026-10-16T18:04:00.000Z"
}
} Reactivation options GET /numbers/{id}/reactivate-optionsPrices for buying the same number again for a longer period. Handy when a service sends a second code later or you need to log in again.
curl -X GET "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/reactivate-options" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"phone": "905381234567",
"options": [
{
"hours": 4,
"price": 0.35
},
{
"hours": 24,
"price": 0.9
},
{
"hours": 168,
"price": 3.2
}
]
} Buy the same number again POST /numbers/{id}/reactivateBuys the same phone number for one of the offered periods and returns a brand-new number object (new id).
Parameters
Possible errors
curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/reactivate" \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"hours":24}' Example response
{
"success": true,
"number": {
"id": "66f1c2d3e4a5b6c7d8e9f0b2",
"phone": "905381234567",
"service": "wa",
"serviceName": "WhatsApp",
"country": "62",
"countryName": "Turkey",
"price": 0.9,
"status": "waiting",
"code": null,
"text": null,
"messages": [],
"canRequestAnother": false,
"awaitingAnother": false,
"canReactivate": false,
"canCancel": true,
"expiresAt": "2026-10-17T18:04:00.000Z",
"createdAt": "2026-10-16T18:04:00.000Z"
},
"balance": 11.18
} Rentals Keep a number for hours, days or weeks and receive every SMS sent to it.
Rental offers GET /rentals/offersNo key needed Countries with rentable numbers for a service and the available periods.
Parameters
servicequery · string required
Service code, or full for any service.
hoursquery · number
Rental period in hours; defaults to the shortest available.
curl -X GET "https://authsms.net/api/v1/rentals/offers?service=wa&hours=72" Example response
{
"success": true,
"enabled": true,
"hours": 72,
"periods": [
24,
72,
168,
720
],
"offers": [
{
"country": "62",
"countryName": "Turkey",
"price": 3.1,
"available": 240,
"operator": null,
"route": "rt_8f3a2c1d"
}
]
} Rents a number for the given period and charges your balance.
Parameters
servicebody · string required
Service code or full.
countrybody · string required
Country id.
hoursbody · number required
One of the periods from rental offers.
routebody · string
Offer route to rent that exact offer.
curl -X POST "https://authsms.net/api/v1/rentals" \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"service":"full","country":"62","hours":72}' Example response
{
"success": true,
"rental": {
"id": "66f1d4e5f6a7b8c9d0e1f2a3",
"phoneNumber": "905385551122",
"service": "full",
"serviceName": "Any service",
"country": "62",
"countryName": "Turkey",
"operator": null,
"periodHours": 72,
"cost": 3.1,
"status": "active",
"startsAt": "2026-10-16T18:00:00.000Z",
"expiresAt": "2026-10-19T18:00:00.000Z",
"messages": [],
"prolongHistory": [],
"canProlong": true,
"createdAt": "2026-10-16T18:00:00.000Z"
},
"balance": 9.4
} All your rentals, newest first.
This endpoint takes no parameters.
curl -X GET "https://authsms.net/api/v1/rentals" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"rentals": [
{
"id": "66f1d4e5f6a7b8c9d0e1f2a3",
"phoneNumber": "905385551122",
"service": "full",
"serviceName": "Any service",
"country": "62",
"countryName": "Turkey",
"operator": null,
"periodHours": 72,
"cost": 3.1,
"status": "active",
"startsAt": "2026-10-16T18:00:00.000Z",
"expiresAt": "2026-10-19T18:00:00.000Z",
"messages": [
{
"sender": "Instagram",
"text": "Your code is 112233",
"code": "112233",
"receivedAt": "2026-10-16T19:12:00.000Z"
}
],
"prolongHistory": [],
"canProlong": true,
"createdAt": "2026-10-16T18:00:00.000Z"
}
]
} Current state and every SMS received so far. Active rentals are refreshed upstream on each call.
Parameters
idpath · string required
Rental id.
curl -X GET "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"rental": {
"id": "66f1d4e5f6a7b8c9d0e1f2a3",
"phoneNumber": "905385551122",
"service": "full",
"serviceName": "Any service",
"country": "62",
"countryName": "Turkey",
"operator": null,
"periodHours": 72,
"cost": 3.1,
"status": "active",
"startsAt": "2026-10-16T18:00:00.000Z",
"expiresAt": "2026-10-19T18:00:00.000Z",
"messages": [
{
"sender": "Instagram",
"text": "Your code is 112233",
"code": "112233",
"receivedAt": "2026-10-16T19:12:00.000Z"
}
],
"prolongHistory": [],
"canProlong": true,
"createdAt": "2026-10-16T18:00:00.000Z"
}
} Extension options GET /rentals/{id}/prolong-optionsPrices for keeping the number longer.
Parameters
idpath · string required
Active rental id.
curl -X GET "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1/prolong-options" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"expiresAt": "2026-10-19T18:00:00.000Z",
"options": [
{
"hours": 24,
"price": 1.2
},
{
"hours": 72,
"price": 3.1
},
{
"hours": 168,
"price": 6
}
]
} Extend a rental POST /rentals/{id}/prolongAdds time to an active rental. The new expiresAt starts from the current expiry.
curl -X POST "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1/prolong" \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"hours":72}' Example response
{
"success": true,
"rental": {
"id": "66f1d4e5f6a7b8c9d0e1f2a3",
"phoneNumber": "905385551122",
"service": "full",
"serviceName": "Any service",
"country": "62",
"countryName": "Turkey",
"operator": null,
"periodHours": 144,
"cost": 3.1,
"status": "active",
"startsAt": "2026-10-16T18:00:00.000Z",
"expiresAt": "2026-10-22T18:00:00.000Z",
"messages": [
{
"sender": "Instagram",
"text": "Your code is 112233",
"code": "112233",
"receivedAt": "2026-10-16T19:12:00.000Z"
}
],
"prolongHistory": [
{
"hours": 72,
"cost": 3.1,
"createdAt": "2026-10-16T20:00:00.000Z"
}
],
"canProlong": true,
"createdAt": "2026-10-16T18:00:00.000Z"
},
"price": 3.1,
"balance": 6.3
} Ends a rental early. Rentals are not refunded.
Parameters
idpath · string required
Active rental id.
curl -X POST "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1/cancel" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true
} Webhooks Get notified instead of polling.
Your current webhook URL and whether signing is enabled.
This endpoint takes no parameters.
curl -X GET "https://authsms.net/api/v1/webhook" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true,
"url": "https://api.acme.io/hooks/authsms",
"events": [
"sms.received",
"number.cancelled",
"number.expired"
],
"signing": true
} Registers (or replaces) your webhook URL. The signing secret is returned once; store it.
Parameters
Possible errors
curl -X PUT "https://authsms.net/api/v1/webhook" \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"url":"https://api.acme.io/hooks/authsms"}' Example response
{
"success": true,
"url": "https://api.acme.io/hooks/authsms",
"secret": "whsec_2b7e151628aed2a6abf7158809cf4f3c",
"events": [
"sms.received",
"number.cancelled",
"number.expired"
]
} Delivers a sample sms.received event (with data.test: true) to your URL.
This endpoint takes no parameters.
curl -X POST "https://authsms.net/api/v1/webhook/test" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true
} Stops all deliveries.
This endpoint takes no parameters.
curl -X DELETE "https://authsms.net/api/v1/webhook" \
-H "X-API-Key: YOUR_API_KEY" Example response
{
"success": true
} Webhook payload and signature Register an HTTPS URL and AuthSMS will POST a JSON event to it the moment an SMS arrives, so you do not have to poll. Each delivery is retried up to 3 times. Verify the signature before trusting the payload.
Events
sms.receivedA code arrived on one of your numbers. data.additional is true for second and later messages.
number.cancelledThe number was cancelled upstream and refunded.
number.expiredThe number expired without an SMS and was refunded.
Headers
X-AuthSMS-EventEvent type, e.g. sms.received.
X-AuthSMS-TimestampUnix seconds when the event was signed.
X-AuthSMS-Signaturev1= + HMAC-SHA256 of "{timestamp}.{rawBody}" using your webhook secret.
Payload
{
"id": "evt_9f1c2d3e4a5b6c7d",
"type": "sms.received",
"createdAt": "2026-10-16T18:04:11.000Z",
"data": {
"numberId": "66f1c2d3e4a5b6c7d8e9f0a1",
"phone": "905381234567",
"service": "wa",
"country": "62",
"code": "847291",
"text": "Your WhatsApp code: 847-291",
"additional": false,
"receivedAt": "2026-10-16T18:04:10.000Z"
}
} Verify signature · Node.js import crypto from 'node:crypto'
export function verifyAuthSmsWebhook(rawBody, headers, secret) {
const ts = headers['x-authsms-timestamp']
const sig = (headers['x-authsms-signature'] || '').replace('v1=', '')
const expected = crypto.createHmac('sha256', secret).update(`${ts}.${rawBody}`).digest('hex')
const fresh = Math.abs(Date.now() / 1000 - Number(ts)) < 300
return fresh && crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))
} Error codes Every error has the same shape: an HTTP status, a stable error code you can branch on, and a human-readable message.
Error response
{
"success": false,
"error": "INSUFFICIENT_BALANCE",
"message": "Insufficient balance"
} Code HTTP Meaning INVALID_API_KEY401 The key is missing, malformed or was regenerated. INSUFFICIENT_BALANCE400 Top up your balance at https://authsms.net/payment. NO_NUMBERS400 No stock for that service in that country right now. Try another country or route. EARLY_CANCEL_DENIED400 Numbers can be cancelled 3 minutes after purchase. remainingSeconds tells you how long to wait. ALREADY_PROCESSED400 The number already received a code, was cancelled or completed. RESEND_UNSUPPORTED400 This number cannot receive another SMS. NOT_REACTIVATABLE400 Only numbers that received a code can be bought again. BAD_DURATION400 The requested period is not offered. allowed lists valid values. RENTAL_DISABLED503 Rentals are temporarily switched off. MAINTENANCE_MODE503 The service is under maintenance; retry in a few minutes. RATE_LIMITED429 Slow down and retry after a short pause. VALIDATION_ERROR400 A parameter is missing or has the wrong type; message says which.
Need a hand with your integration?
Open a ticket and a human will answer, usually within a few hours.