WhatsApp OTP API
— no subscription

# 1. Send a code (6 digits, valid for 10 minutes unless you change it)
curl -X POST https://payperwa.com/api/v1/otp/send \
  -H "Authorization: Bearer ppw_live_sk_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"to": "919876543210", "code_length": 6, "expiry_minutes": 10}'

# 2. Check the code your user typed
curl -X POST https://payperwa.com/api/v1/otp/verify \
  -H "Authorization: Bearer ppw_live_sk_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"to": "919876543210", "code": "482913"}'

// Node.js 18+ (built-in fetch). Run this on your server, never in the browser.
const BASE = "https://payperwa.com/api/v1";
const API_KEY = process.env.PAYPERWA_API_KEY; // ppw_live_sk_...

async function ppw(path, body) {
  const res = await fetch(`${BASE}/${path}`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify(body),
  });
  const json = await res.json();
  // e.g. 429 while the 30-second resend cooldown runs
  if (!res.ok) throw new Error(`PayPerWA ${res.status}: ${JSON.stringify(json)}`);
  return json.data;
}

// 1. Send a code when the user asks for one
async function sendOtp(phone) {
  const { verification_id, expires_at } = await ppw("otp/send", { to: phone });
  return { verification_id, expires_at };
}

// 2. Check the code the user typed
async function verifyOtp(phone, code) {
  // code must be a string of digits, e.g. "048213" (a number would drop the leading zero)
  const { valid, status, attempts_remaining } = await ppw("otp/verify", { to: phone, code: String(code).trim() });
  // status: "approved" | "incorrect" | "max_attempts" | "expired" | "not_found"
  return { valid, status, attempts_remaining };
}

import os
import requests

BASE = "https://payperwa.com/api/v1"
API_KEY = os.environ["PAYPERWA_API_KEY"]  # ppw_live_sk_...


def ppw(path, body):
    res = requests.post(
        f"{BASE}/{path}",
        headers={"Authorization": f"Bearer {API_KEY}"},
        json=body,
        timeout=30,
    )
    if res.status_code != 200:
        # e.g. 429 while the 30-second resend cooldown runs
        raise RuntimeError(f"PayPerWA {res.status_code}: {res.text}")
    return res.json()["data"]


# 1. Send a code when the user asks for one
def send_otp(phone):
    data = ppw("otp/send", {"to": phone})
    return data["verification_id"], data["expires_at"]


# 2. Check the code the user typed
def verify_otp(phone, code):
    # code must be a string of digits, e.g. "048213"
    data = ppw("otp/verify", {"to": phone, "code": str(code).strip()})
    # status: approved | incorrect | max_attempts | expired | not_found
    return data["valid"], data["status"]

<?php
const PPW_BASE = "https://payperwa.com/api/v1";

function ppw(string $path, array $body): array {
    $ch = curl_init(PPW_BASE . "/" . $path);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_POST           => true,
        CURLOPT_HTTPHEADER     => [
            "Authorization: Bearer " . getenv("PAYPERWA_API_KEY"), // ppw_live_sk_...
            "Content-Type: application/json",
        ],
        CURLOPT_POSTFIELDS     => json_encode($body),
        CURLOPT_TIMEOUT        => 30,
    ]);
    $resp   = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    if ($resp === false || $status !== 200) {
        // e.g. 429 while the 30-second resend cooldown runs
        throw new RuntimeException("PayPerWA $status: " . ($resp ?: "no response"));
    }
    return json_decode($resp, true)["data"];
}

// 1. Send a code when the user asks for one
function send_otp(string $phone): array {
    return ppw("otp/send", ["to" => $phone]); // verification_id, expires_at, ...
}

// 2. Check the code the user typed
function verify_otp(string $phone, string $code): array {
    // ["valid" => bool, "status" => approved | incorrect | max_attempts | expired | not_found]
    return ppw("otp/verify", ["to" => $phone, "code" => trim($code)]);
}