Quickstart

Overview

TACNow is a delivery-only SMS OTP API. You send a message with a {{code}} placeholder; TACNow substitutes a generated code and delivers it via SMS. You handle verification on your side — TACNow never stores or checks codes.

Base URL

https://api.tacnow.co/v1

All requests require Content-Type: application/json and an Authorization header.

Authentication

Authenticate every request with a Bearer token using an API key from your project dashboard.

Authorization: Bearer sk_live_your_api_key_here

TACNow issues two key types per project:

Keep your live keys secret. Rotate them from the console at any time.

Send OTP

POST /v1/otp/send

Send an OTP to a phone number. TACNow generates a numeric code, replaces {{code}} in your message, and delivers it.

Request body

Response

{
  "ok": true,
  "data": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "status": "enqueued",
    "mode": "live",
    "phoneMasked": "****6789"
  }
}

curl -X POST https://api.tacnow.co/v1/otp/send \
-H "Authorization: Bearer sk_live_your_key" \
-H "Content-Type: application/json" \
-d '{
  "phone": "+60123456789",
  "message": "Your verification code is {{code}}. Valid for 5 minutes.",
  "codeLength": 6
}'

Test Mode

Use a sk_test_ API key to develop and test without sending real messages or spending credits.

Authorization: Bearer sk_test_your_test_key

In test mode:

• No SMS is delivered to the recipient
• Credits are not deducted from your project wallet
• The response shape is identical to live mode — your code doesn't need to change
• Delivery logs show mode: "test" so you can distinguish them in the dashboard

Switch to a sk_live_ key when you're ready to go live. No other code changes needed.

Error Codes

All error responses follow this shape:

{
  "ok": false,
  "error": "ERROR_CODE",
  "message": "Human-readable description"
}