Resend OTP

Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.
Provide exactly one query parameter to identify the subject: contact, id, or internalId.

The endpoint validates:

• The request is not canceled
• Maximum attempts have not been reached, only successful OTP sends count towards resend limits
• Sufficient time has passed since the last successful resend
• Billing restrictions apply

PATCH /request/resend/{requestId}

Resend OTP

cURL

curl --request PATCH \
  --url https://api.example.com/request/resend/{requestId}

import requests

url = "https://api.example.com/request/resend/{requestId}"

response = requests.patch(url)

print(response.text)

const options = {method: 'PATCH'};

fetch('https://api.example.com/request/resend/{requestId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/request/resend/{requestId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/request/resend/{requestId}"

	req, _ := http.NewRequest("PATCH", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://api.example.com/request/resend/{requestId}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.example.com/request/resend/{requestId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)

response = http.request(request)
puts response.read_body

201

{
  "success": true
}

{
  "statusCode": 400,
  "message": "Exactly one search parameter must be provided: contact, id, or internalId",
  "error": "Bad Request"
}

{
  "statusCode": 402,
  "message": "Insufficient credits for this action. Please top up your balance.",
  "error": "Unknown Error"
}

{
  "statusCode": 403,
  "message": "Request was canceled, the signing link expired, the maximum OTP attempts or resends were reached, or the minimum time between resends has not elapsed",
  "error": "Forbidden"
}

{
  "statusCode": 404,
  "message": "SubjectOtp not found",
  "error": "Not Found"
}

Headers

Idempotency-Key · string

Optional key used to safely retry the same create/initiate request without duplicating side effects.

Example:

"a96d14c5-8e60-4f6b-9d80-5c18c0e4202a"

API-Version · string

Pin request, response, and webhook shapes to a specific dated API version (YYYY-MM-DD). Omit to use the version pinned to your API key (set when the key is created; new keys default to the latest version). New integrations should target the latest version.

Pattern: ^\d{4}-\d{2}-\d{2}$

Example:

"2026-07-06"

Path Parameters

requestId · string · required

Unique identifier of the credential request. Must be a valid MongoDB ObjectId.

Example:

"507f1f77bcf86cd799439011"

Query Parameters

contact · string

Verified contact value (email or phone)

Example:

"[e-mail]"

id · string

User's VIA identifier

Example:

"did:web:humanos.tech:user:73ebefdd-a549-4873-aad9-def80c40c8c8"

internalId · string

Identifier to help you identify the user in your own system. We recommend using a unique value.

Example:

"internal-12345"

Response

201

application/json

Returns a confirmation that the OTP was sent successfully via email or SMS.

success · boolean · required

Whether the operation was successful

Example:

true