Documentación de la API - API de verificación por SMS

Inicio rápido

The AuthSMS API is a JSON REST API. Every request is authenticated with your personal API key, every response is JSON with a `success` flag, and prices are in USD. Use it to automate account verification for WhatsApp, Telegram, Google and 1,000+ other services across 150+ countries.

1
Pick a country
Ask for offers for wa and choose the cheapest country with stock.
GET/offers
2
Buy the number
POST the service and country. Keep the returned id and show phone to the user.
POST/numbers
3
Wait for the code
Poll GET /numbers/{id} every few seconds until status is received, or let a webhook call you.
GET/numbers/{id}
4
Finish
Call complete when you are done, or cancel within the active window if the code never came (auto-refund happens anyway on expiry).
POST/numbers/{id}/complete

Autenticación

Create an API key on this page (sign in first). Send it in the X-API-Key header on every request. Keys do not expire; regenerate a key to revoke the old one immediately. Keep the key on your server and never ship it inside a mobile app or browser code.

Clave API

Inicia sesión o crea una cuenta para obtener una clave API personal.

Iniciar sesión Registrarse

curl "https://authsms.net/api/v1/me" -H "X-API-Key: YOUR_API_KEY"

Convenciones

Base URL: https://authsms.net/api/v1
Format: JSON request bodies (Content-Type: application/json) and JSON responses.
Success: Every response includes success: true. The HTTP status is 200.
Errors: Status 4xx/5xx with success: false, a machine-readable error code and a human message.
Money: All prices and balances are USD numbers with up to 4 decimals, e.g. 0.42.
Time: Timestamps are ISO 8601 in UTC, e.g. 2026-10-16T18:04:11.000Z.
IDs: Number and rental ids are 24-character strings. Keep them; they are what you pass back to the API.
Rate limits: Per key: 120 reads/min, 12 purchases/min. Over the limit you get 429 RATE_LIMITED.

Estados de los números

waiting	Number is active and no SMS has arrived yet. Poll `GET /numbers/{id}` or wait for the webhook.
received	At least one code arrived. `code` holds the latest one, `messages` all of them.
completed	You marked the number as done. No more SMS will be delivered.
cancelled	You cancelled the number; the price was refunded.
auto_cancelled	No SMS arrived before the number expired; the price was refunded automatically.

Ejemplos

Account

Who you are and how much you can spend.

Get account

GET

Returns your username, email and current balance.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/me" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "user": {
    "username": "acme",
    "email": "dev@acme.io"
  },
  "balance": 12.5,
  "currency": "USD"
}

Get balance

GET

Lightweight balance check. Call it before buying in bulk.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/balance" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "balance": 12.5,
  "currency": "USD"
}

Catalog

Countries, services, prices and stock. These endpoints work without an API key.

List countries

GETNo requiere clave

All countries you can buy numbers in. Use id as the country parameter elsewhere.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/countries"

Respuesta de ejemplo

{
  "success": true,
  "countries": [
    {
      "id": "0",
      "name": "Russia"
    },
    {
      "id": "62",
      "name": "Turkey"
    },
    {
      "id": "187",
      "name": "United States"
    }
  ]
}

List services

GETNo requiere clave

Every service (app or website) you can receive codes for. Use code as the service parameter elsewhere.

Parámetros

countryquery · string
Only services available in this country id.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/services?country=62"

Respuesta de ejemplo

{
  "success": true,
  "services": [
    {
      "code": "wa",
      "name": "WhatsApp"
    },
    {
      "code": "tg",
      "name": "Telegram"
    },
    {
      "code": "go",
      "name": "Google"
    }
  ]
}

Get prices

GETNo requiere clave

Current price and stock per country and service. Filter by either or both.

Parámetros

servicequery · string
Service code, e.g. wa.
countryquery · string
Country id, e.g. 62.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/prices?service=wa&country=62"

Respuesta de ejemplo

{
  "success": true,
  "prices": [
    {
      "country": "62",
      "service": "wa",
      "price": 0.42,
      "available": 1835
    },
    {
      "country": "187",
      "service": "wa",
      "price": 0.95,
      "available": 412
    }
  ]
}

Get offers for a service

GETNo requiere clave

The easiest way to pick a country: every country with stock for one service, sorted by availability. Pass the route back when buying to lock in exactly this offer.

Parámetros

servicequery · stringobligatorio
Service code, e.g. wa.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/offers?service=wa"

Respuesta de ejemplo

{
  "success": true,
  "offers": [
    {
      "country": "62",
      "countryName": "Turkey",
      "price": 0.42,
      "available": 1835,
      "operator": null,
      "route": "rt_8f3a2c1d"
    },
    {
      "country": "187",
      "countryName": "United States",
      "price": 0.95,
      "available": 412,
      "operator": null,
      "route": "rt_8f3a2c1d"
    }
  ]
}

Numbers

One-time numbers for receiving verification codes. The full lifecycle: buy, poll or webhook, complete (or cancel).

Buy a number

POST

Reserves a number and charges your balance. The number stays active for the period shown in expiresAt (typically 20 minutes). If no SMS arrives it is refunded automatically.

Parámetros

servicebody · stringobligatorio
Service code from /services, e.g. wa.
countrybody · stringobligatorio
Country id from /countries, e.g. 62.
routebody · string
Offer route from /offers to buy that exact offer.
operatorbody · string
Mobile operator, when /offers lists one.

Enter the phone in the app you are verifying, then poll GET /numbers/{id} every 3 to 5 seconds or use a webhook.

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/numbers" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"service":"wa","country":"62"}'

Respuesta de ejemplo

{
  "success": true,
  "number": {
    "id": "66f1c2d3e4a5b6c7d8e9f0a1",
    "phone": "905381234567",
    "service": "wa",
    "serviceName": "WhatsApp",
    "country": "62",
    "countryName": "Turkey",
    "price": 0.42,
    "status": "waiting",
    "code": null,
    "text": null,
    "messages": [],
    "canRequestAnother": false,
    "awaitingAnother": false,
    "canReactivate": false,
    "canCancel": true,
    "expiresAt": "2026-10-16T18:24:00.000Z",
    "createdAt": "2026-10-16T18:04:00.000Z"
  },
  "balance": 12.08
}

Get a number (poll for the code)

GET

Returns the current state. While the number is active, this call also checks upstream for new messages, so it is the only endpoint you need to poll.

Parámetros

idpath · stringobligatorio
Number id from the purchase response.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "number": {
    "id": "66f1c2d3e4a5b6c7d8e9f0a1",
    "phone": "905381234567",
    "service": "wa",
    "serviceName": "WhatsApp",
    "country": "62",
    "countryName": "Turkey",
    "price": 0.42,
    "status": "received",
    "code": "847291",
    "text": "Your WhatsApp code: 847-291",
    "messages": [
      {
        "code": "847291",
        "text": "Your WhatsApp code: 847-291",
        "sender": "WhatsApp",
        "receivedAt": "2026-10-16T18:04:10.000Z"
      }
    ],
    "canRequestAnother": true,
    "awaitingAnother": false,
    "canReactivate": true,
    "canCancel": false,
    "expiresAt": "2026-10-16T18:24:00.000Z",
    "createdAt": "2026-10-16T18:04:00.000Z"
  }
}

List numbers

GET

Your numbers, newest first, with pagination.

Parámetros

statusquery · string
One of waiting, received, completed, cancelled, auto_cancelled.
servicequery · string
Filter by service code.
countryquery · string
Filter by country id.
pagequery · number
Page number, default 1.
limitquery · number
Items per page, 1 to 100, default 20.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/numbers?service=wa&country=62" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "numbers": [
    {
      "id": "66f1c2d3e4a5b6c7d8e9f0a1",
      "phone": "905381234567",
      "service": "wa",
      "serviceName": "WhatsApp",
      "country": "62",
      "countryName": "Turkey",
      "price": 0.42,
      "status": "received",
      "code": "847291",
      "text": "Your WhatsApp code: 847-291",
      "messages": [
        {
          "code": "847291",
          "text": "Your WhatsApp code: 847-291",
          "sender": "WhatsApp",
          "receivedAt": "2026-10-16T18:04:10.000Z"
        }
      ],
      "canRequestAnother": true,
      "awaitingAnother": false,
      "canReactivate": true,
      "canCancel": false,
      "expiresAt": "2026-10-16T18:24:00.000Z",
      "createdAt": "2026-10-16T18:04:00.000Z"
    }
  ],
  "pagination": {
    "page": 1,
    "limit": 20,
    "total": 1,
    "totalPages": 1,
    "hasMore": false
  }
}

Complete a number

POST

Tell us you are done with a number that received a code. Frees the number early; no refund. Safe to call twice.

Parámetros

idpath · stringobligatorio
Number id.

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/complete" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "number": {
    "id": "66f1c2d3e4a5b6c7d8e9f0a1",
    "phone": "905381234567",
    "service": "wa",
    "serviceName": "WhatsApp",
    "country": "62",
    "countryName": "Turkey",
    "price": 0.42,
    "status": "completed",
    "code": "847291",
    "text": "Your WhatsApp code: 847-291",
    "messages": [
      {
        "code": "847291",
        "text": "Your WhatsApp code: 847-291",
        "sender": "WhatsApp",
        "receivedAt": "2026-10-16T18:04:10.000Z"
      }
    ],
    "canRequestAnother": false,
    "awaitingAnother": false,
    "canReactivate": true,
    "canCancel": false,
    "expiresAt": "2026-10-16T18:24:00.000Z",
    "createdAt": "2026-10-16T18:04:00.000Z"
  }
}

Cancel a number

POST

Cancels a number that has not received a code yet and refunds its price. Allowed 3 minutes after purchase.

Parámetros

idpath · stringobligatorio
Number id.

Errores posibles

EARLY_CANCEL_DENIED ALREADY_PROCESSED

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/cancel" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "refund": 0.42,
  "balance": 12.5,
  "number": {
    "id": "66f1c2d3e4a5b6c7d8e9f0a1",
    "phone": "905381234567",
    "service": "wa",
    "serviceName": "WhatsApp",
    "country": "62",
    "countryName": "Turkey",
    "price": 0.42,
    "status": "cancelled",
    "code": null,
    "text": null,
    "messages": [],
    "canRequestAnother": false,
    "awaitingAnother": false,
    "canReactivate": false,
    "canCancel": false,
    "expiresAt": null,
    "createdAt": "2026-10-16T18:04:00.000Z"
  }
}

Request another SMS

POST

For a number that already received a code: ask for one more SMS on the same number (for example a second verification step). For a waiting number: ask the upstream network to resend. Watch awaitingAnother and messages.

Parámetros

idpath · stringobligatorio
Number id.

Errores posibles

RESEND_UNSUPPORTED EARLY_RESEND_DENIED

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/resend" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "awaitingAnother": true,
  "number": {
    "id": "66f1c2d3e4a5b6c7d8e9f0a1",
    "phone": "905381234567",
    "service": "wa",
    "serviceName": "WhatsApp",
    "country": "62",
    "countryName": "Turkey",
    "price": 0.42,
    "status": "received",
    "code": "847291",
    "text": "Your WhatsApp code: 847-291",
    "messages": [
      {
        "code": "847291",
        "text": "Your WhatsApp code: 847-291",
        "sender": "WhatsApp",
        "receivedAt": "2026-10-16T18:04:10.000Z"
      }
    ],
    "canRequestAnother": false,
    "awaitingAnother": true,
    "canReactivate": true,
    "canCancel": false,
    "expiresAt": "2026-10-16T18:24:00.000Z",
    "createdAt": "2026-10-16T18:04:00.000Z"
  }
}

Reactivation options

GET

Prices for buying the same number again for a longer period. Handy when a service sends a second code later or you need to log in again.

Parámetros

idpath · stringobligatorio
A number with status received or completed.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/reactivate-options" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "phone": "905381234567",
  "options": [
    {
      "hours": 4,
      "price": 0.35
    },
    {
      "hours": 24,
      "price": 0.9
    },
    {
      "hours": 168,
      "price": 3.2
    }
  ]
}

Buy the same number again

POST

Buys the same phone number for one of the offered periods and returns a brand-new number object (new id).

Parámetros

idpath · stringobligatorio
Previous number id.
hoursbody · numberobligatorio
One of the hours values from reactivation options.

Errores posibles

NOT_REACTIVATABLE BAD_DURATION NO_NUMBERS

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/numbers/66f1c2d3e4a5b6c7d8e9f0a1/reactivate" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"hours":24}'

Respuesta de ejemplo

{
  "success": true,
  "number": {
    "id": "66f1c2d3e4a5b6c7d8e9f0b2",
    "phone": "905381234567",
    "service": "wa",
    "serviceName": "WhatsApp",
    "country": "62",
    "countryName": "Turkey",
    "price": 0.9,
    "status": "waiting",
    "code": null,
    "text": null,
    "messages": [],
    "canRequestAnother": false,
    "awaitingAnother": false,
    "canReactivate": false,
    "canCancel": true,
    "expiresAt": "2026-10-17T18:04:00.000Z",
    "createdAt": "2026-10-16T18:04:00.000Z"
  },
  "balance": 11.18
}

Rentals

Keep a number for hours, days or weeks and receive every SMS sent to it.

Rental offers

GETNo requiere clave

Countries with rentable numbers for a service and the available periods.

Parámetros

servicequery · stringobligatorio
Service code, or full for any service.
hoursquery · number
Rental period in hours; defaults to the shortest available.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/rentals/offers?service=wa&hours=72"

Respuesta de ejemplo

{
  "success": true,
  "enabled": true,
  "hours": 72,
  "periods": [
    24,
    72,
    168,
    720
  ],
  "offers": [
    {
      "country": "62",
      "countryName": "Turkey",
      "price": 3.1,
      "available": 240,
      "operator": null,
      "route": "rt_8f3a2c1d"
    }
  ]
}

Rent a number

POST

Rents a number for the given period and charges your balance.

Parámetros

servicebody · stringobligatorio
Service code or full.
countrybody · stringobligatorio
Country id.
hoursbody · numberobligatorio
One of the periods from rental offers.
routebody · string
Offer route to rent that exact offer.

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/rentals" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"service":"full","country":"62","hours":72}'

Respuesta de ejemplo

{
  "success": true,
  "rental": {
    "id": "66f1d4e5f6a7b8c9d0e1f2a3",
    "phoneNumber": "905385551122",
    "service": "full",
    "serviceName": "Any service",
    "country": "62",
    "countryName": "Turkey",
    "operator": null,
    "periodHours": 72,
    "cost": 3.1,
    "status": "active",
    "startsAt": "2026-10-16T18:00:00.000Z",
    "expiresAt": "2026-10-19T18:00:00.000Z",
    "messages": [],
    "prolongHistory": [],
    "canProlong": true,
    "createdAt": "2026-10-16T18:00:00.000Z"
  },
  "balance": 9.4
}

List rentals

GET

All your rentals, newest first.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/rentals" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "rentals": [
    {
      "id": "66f1d4e5f6a7b8c9d0e1f2a3",
      "phoneNumber": "905385551122",
      "service": "full",
      "serviceName": "Any service",
      "country": "62",
      "countryName": "Turkey",
      "operator": null,
      "periodHours": 72,
      "cost": 3.1,
      "status": "active",
      "startsAt": "2026-10-16T18:00:00.000Z",
      "expiresAt": "2026-10-19T18:00:00.000Z",
      "messages": [
        {
          "sender": "Instagram",
          "text": "Your code is 112233",
          "code": "112233",
          "receivedAt": "2026-10-16T19:12:00.000Z"
        }
      ],
      "prolongHistory": [],
      "canProlong": true,
      "createdAt": "2026-10-16T18:00:00.000Z"
    }
  ]
}

Get a rental (messages)

GET

Current state and every SMS received so far. Active rentals are refreshed upstream on each call.

Parámetros

idpath · stringobligatorio
Rental id.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "rental": {
    "id": "66f1d4e5f6a7b8c9d0e1f2a3",
    "phoneNumber": "905385551122",
    "service": "full",
    "serviceName": "Any service",
    "country": "62",
    "countryName": "Turkey",
    "operator": null,
    "periodHours": 72,
    "cost": 3.1,
    "status": "active",
    "startsAt": "2026-10-16T18:00:00.000Z",
    "expiresAt": "2026-10-19T18:00:00.000Z",
    "messages": [
      {
        "sender": "Instagram",
        "text": "Your code is 112233",
        "code": "112233",
        "receivedAt": "2026-10-16T19:12:00.000Z"
      }
    ],
    "prolongHistory": [],
    "canProlong": true,
    "createdAt": "2026-10-16T18:00:00.000Z"
  }
}

Extension options

GET

Prices for keeping the number longer.

Parámetros

idpath · stringobligatorio
Active rental id.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1/prolong-options" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "expiresAt": "2026-10-19T18:00:00.000Z",
  "options": [
    {
      "hours": 24,
      "price": 1.2
    },
    {
      "hours": 72,
      "price": 3.1
    },
    {
      "hours": 168,
      "price": 6
    }
  ]
}

Extend a rental

POST

Adds time to an active rental. The new expiresAt starts from the current expiry.

Parámetros

idpath · stringobligatorio
Active rental id.
hoursbody · numberobligatorio
One of the hours values from extension options.

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1/prolong" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"hours":72}'

Respuesta de ejemplo

{
  "success": true,
  "rental": {
    "id": "66f1d4e5f6a7b8c9d0e1f2a3",
    "phoneNumber": "905385551122",
    "service": "full",
    "serviceName": "Any service",
    "country": "62",
    "countryName": "Turkey",
    "operator": null,
    "periodHours": 144,
    "cost": 3.1,
    "status": "active",
    "startsAt": "2026-10-16T18:00:00.000Z",
    "expiresAt": "2026-10-22T18:00:00.000Z",
    "messages": [
      {
        "sender": "Instagram",
        "text": "Your code is 112233",
        "code": "112233",
        "receivedAt": "2026-10-16T19:12:00.000Z"
      }
    ],
    "prolongHistory": [
      {
        "hours": 72,
        "cost": 3.1,
        "createdAt": "2026-10-16T20:00:00.000Z"
      }
    ],
    "canProlong": true,
    "createdAt": "2026-10-16T18:00:00.000Z"
  },
  "price": 3.1,
  "balance": 6.3
}

Cancel a rental

POST

Ends a rental early. Rentals are not refunded.

Parámetros

idpath · stringobligatorio
Active rental id.

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/rentals/66f1c2d3e4a5b6c7d8e9f0a1/cancel" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true
}

Webhooks

Get notified instead of polling.

Get webhook

GET

Your current webhook URL and whether signing is enabled.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X GET "https://authsms.net/api/v1/webhook" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true,
  "url": "https://api.acme.io/hooks/authsms",
  "events": [
    "sms.received",
    "number.cancelled",
    "number.expired"
  ],
  "signing": true
}

Set webhook

PUT

Registers (or replaces) your webhook URL. The signing secret is returned once; store it.

Parámetros

urlbody · stringobligatorio
Public HTTPS URL. Private or local addresses are rejected.

Errores posibles

INVALID_URL

Solicitud · cURL

curl -X PUT "https://authsms.net/api/v1/webhook" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://api.acme.io/hooks/authsms"}'

Respuesta de ejemplo

{
  "success": true,
  "url": "https://api.acme.io/hooks/authsms",
  "secret": "whsec_2b7e151628aed2a6abf7158809cf4f3c",
  "events": [
    "sms.received",
    "number.cancelled",
    "number.expired"
  ]
}

Send a test event

POST

Delivers a sample sms.received event (with data.test: true) to your URL.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X POST "https://authsms.net/api/v1/webhook/test" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true
}

Remove webhook

DELETE

Stops all deliveries.

Este endpoint no admite parámetros.

Solicitud · cURL

curl -X DELETE "https://authsms.net/api/v1/webhook" \
  -H "X-API-Key: YOUR_API_KEY"

Respuesta de ejemplo

{
  "success": true
}

Carga útil del webhook y firma

Register an HTTPS URL and AuthSMS will POST a JSON event to it the moment an SMS arrives, so you do not have to poll. Each delivery is retried up to 3 times. Verify the signature before trusting the payload.

Eventos

sms.received
A code arrived on one of your numbers. data.additional is true for second and later messages.
number.cancelled
The number was cancelled upstream and refunded.
number.expired
The number expired without an SMS and was refunded.

Cabeceras

X-AuthSMS-Event
Event type, e.g. sms.received.
X-AuthSMS-Timestamp
Unix seconds when the event was signed.
X-AuthSMS-Signature
v1= + HMAC-SHA256 of "{timestamp}.{rawBody}" using your webhook secret.

Carga útil

{
  "id": "evt_9f1c2d3e4a5b6c7d",
  "type": "sms.received",
  "createdAt": "2026-10-16T18:04:11.000Z",
  "data": {
    "numberId": "66f1c2d3e4a5b6c7d8e9f0a1",
    "phone": "905381234567",
    "service": "wa",
    "country": "62",
    "code": "847291",
    "text": "Your WhatsApp code: 847-291",
    "additional": false,
    "receivedAt": "2026-10-16T18:04:10.000Z"
  }
}

Verificar la firma · Node.js

import crypto from 'node:crypto'

export function verifyAuthSmsWebhook(rawBody, headers, secret) {
  const ts = headers['x-authsms-timestamp']
  const sig = (headers['x-authsms-signature'] || '').replace('v1=', '')
  const expected = crypto.createHmac('sha256', secret).update(`${ts}.${rawBody}`).digest('hex')
  const fresh = Math.abs(Date.now() / 1000 - Number(ts)) < 300
  return fresh && crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))
}

Códigos de error

Todos los errores tienen la misma forma: un estado HTTP, un código de error estable sobre el que puedes ramificar y un mensaje legible.

Respuesta de error

{
  "success": false,
  "error": "INSUFFICIENT_BALANCE",
  "message": "Insufficient balance"
}

Código	HTTP	Significado
`INVALID_API_KEY`	401	The key is missing, malformed or was regenerated.
`INSUFFICIENT_BALANCE`	400	Top up your balance at https://authsms.net/payment.
`NO_NUMBERS`	400	No stock for that service in that country right now. Try another country or route.
`EARLY_CANCEL_DENIED`	400	Numbers can be cancelled 3 minutes after purchase. `remainingSeconds` tells you how long to wait.
`ALREADY_PROCESSED`	400	The number already received a code, was cancelled or completed.
`RESEND_UNSUPPORTED`	400	This number cannot receive another SMS.
`NOT_REACTIVATABLE`	400	Only numbers that received a code can be bought again.
`BAD_DURATION`	400	The requested period is not offered. `allowed` lists valid values.
`RENTAL_DISABLED`	503	Rentals are temporarily switched off.
`MAINTENANCE_MODE`	503	The service is under maintenance; retry in a few minutes.
`RATE_LIMITED`	429	Slow down and retry after a short pause.
`VALIDATION_ERROR`	400	A parameter is missing or has the wrong type; `message` says which.

¿Necesitas ayuda con tu integración?

Abre un ticket y una persona te responderá, normalmente en pocas horas.

Abrir un ticket Contacto