What is sendotp.email?

sendotp.email is an API for email one-time passwords and access codes. It sends an OTP to an email address and verifies it for login, lists, private content, generated reports, and other email-gated flows, keeping the code stable for 10 minutes and rejecting disposable email addresses.

How long is an OTP stable?

The same email address receives the same OTP for 10 minutes. Repeated calls during that window are idempotent and do not create a rolling bucket of new codes.

Does it block disposable email addresses?

Yes. Known disposable and throwaway email domains are rejected before an OTP is sent, so verifications for lists, reports, private content, and signups land on real, reachable inboxes.

Can I use email OTPs for generated reports or private content?

Yes. You can verify the visitor's email before showing a generated report, file download, private album, or client portal, then let the same address request a stable code again when they come back.

OTP

Send OTP

Send or resend an idempotent email code for an email and purpose.

Copy page

POST/v1/send

Send code

cURL

curl --request POST \
  --url https://api.sendotp.email/v1/send \
  --header "Authorization: Bearer $SENDOTP_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{"email":"[email protected]","purpose":"report-access"}'

200

The code was accepted for delivery.

{
  "ok": true,
  "expiresAt": 1700000600
}

Overview

Creates a live code when none exists, or emails the same live code again for the same normalized email and purpose. The default live window is 10 minutes.

Authorization

Bearer API keyAuthorizationrequired

Send a server API key in the Authorization header. Browser-origin requests are rejected so keys stay on your backend.

Request

emailstringrequired

Recipient email address. It is trimmed, lowercased, and validated before lookup.

purposestringrequired

Stable flow key such as login, report-access, signup, or account-delete.

Responses

200

The code was accepted for delivery.

{
  "ok": true,
  "expiresAt": 1700000600
}

429

The email and purpose exceeded the account rate limit.

{
  "error": "rate_limited"
}