Generate a WhatsApp OTP Link

Generate OTP link

curl --request POST \
  --url https://app.hypersender.com/api/otp/v2/{instance}/generate-link \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "chatId": "[email protected]",
  "expires": 1800,
  "name": "Hypersender",
  "message": {
    "prompt": "Give me link to login at hypersender",
    "success": "Here is your login link: {link}",
    "failed": "Login failed, please try again later.",
    "expired": "The link has been expired, please try another one."
  },
  "callback": {
    "success": "https://yourdomain.com/callback/success",
    "failed": "https://yourdomain.com/callback/failed"
  }
}
'

import requests

url = "https://app.hypersender.com/api/otp/v2/{instance}/generate-link"

payload = {
    "chatId": "[email protected]",
    "expires": 1800,
    "name": "Hypersender",
    "message": {
        "prompt": "Give me link to login at hypersender",
        "success": "Here is your login link: {link}",
        "failed": "Login failed, please try again later.",
        "expired": "The link has been expired, please try another one."
    },
    "callback": {
        "success": "https://yourdomain.com/callback/success",
        "failed": "https://yourdomain.com/callback/failed"
    }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    chatId: '[email protected]',
    expires: 1800,
    name: 'Hypersender',
    message: {
      prompt: 'Give me link to login at hypersender',
      success: 'Here is your login link: {link}',
      failed: 'Login failed, please try again later.',
      expired: 'The link has been expired, please try another one.'
    },
    callback: {
      success: 'https://yourdomain.com/callback/success',
      failed: 'https://yourdomain.com/callback/failed'
    }
  })
};

fetch('https://app.hypersender.com/api/otp/v2/{instance}/generate-link', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.hypersender.com/api/otp/v2/{instance}/generate-link",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'chatId' => '[email protected]',
    'expires' => 1800,
    'name' => 'Hypersender',
    'message' => [
        'prompt' => 'Give me link to login at hypersender',
        'success' => 'Here is your login link: {link}',
        'failed' => 'Login failed, please try again later.',
        'expired' => 'The link has been expired, please try another one.'
    ],
    'callback' => [
        'success' => 'https://yourdomain.com/callback/success',
        'failed' => 'https://yourdomain.com/callback/failed'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.hypersender.com/api/otp/v2/{instance}/generate-link"

	payload := strings.NewReader("{\n  \"chatId\": \"[email protected]\",\n  \"expires\": 1800,\n  \"name\": \"Hypersender\",\n  \"message\": {\n    \"prompt\": \"Give me link to login at hypersender\",\n    \"success\": \"Here is your login link: {link}\",\n    \"failed\": \"Login failed, please try again later.\",\n    \"expired\": \"The link has been expired, please try another one.\"\n  },\n  \"callback\": {\n    \"success\": \"https://yourdomain.com/callback/success\",\n    \"failed\": \"https://yourdomain.com/callback/failed\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.hypersender.com/api/otp/v2/{instance}/generate-link")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"chatId\": \"[email protected]\",\n  \"expires\": 1800,\n  \"name\": \"Hypersender\",\n  \"message\": {\n    \"prompt\": \"Give me link to login at hypersender\",\n    \"success\": \"Here is your login link: {link}\",\n    \"failed\": \"Login failed, please try again later.\",\n    \"expired\": \"The link has been expired, please try another one.\"\n  },\n  \"callback\": {\n    \"success\": \"https://yourdomain.com/callback/success\",\n    \"failed\": \"https://yourdomain.com/callback/failed\"\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.hypersender.com/api/otp/v2/{instance}/generate-link")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"chatId\": \"[email protected]\",\n  \"expires\": 1800,\n  \"name\": \"Hypersender\",\n  \"message\": {\n    \"prompt\": \"Give me link to login at hypersender\",\n    \"success\": \"Here is your login link: {link}\",\n    \"failed\": \"Login failed, please try again later.\",\n    \"expired\": \"The link has been expired, please try another one.\"\n  },\n  \"callback\": {\n    \"success\": \"https://yourdomain.com/callback/success\",\n    \"failed\": \"https://yourdomain.com/callback/failed\"\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "success": true,
  "message": "OTP link request created successfully",
  "data": {
    "uuid": "a0b5e14e-95da-4bd4-9e2a-071661244bef",
    "code": "RDYFQUBX",
    "chat_id": "[email protected]",
    "status": "pending",
    "otp_type": "link",
    "expires_at": "2025-12-29T18:14:55+00:00",
    "created_at": "2025-12-29T17:44:55+00:00",
    "whatsapp_link": "https://wa.me/201553730661?text=Give+me+link+to+login+at+7enkesh+%5BRDYFQUBX%5D+-+DO+NOT+CHANGE+THIS+MESSAGE"
  }
}

POST

{instance}

generate-link

Generate OTP link

curl --request POST \
  --url https://app.hypersender.com/api/otp/v2/{instance}/generate-link \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "chatId": "[email protected]",
  "expires": 1800,
  "name": "Hypersender",
  "message": {
    "prompt": "Give me link to login at hypersender",
    "success": "Here is your login link: {link}",
    "failed": "Login failed, please try again later.",
    "expired": "The link has been expired, please try another one."
  },
  "callback": {
    "success": "https://yourdomain.com/callback/success",
    "failed": "https://yourdomain.com/callback/failed"
  }
}
'

import requests

url = "https://app.hypersender.com/api/otp/v2/{instance}/generate-link"

payload = {
    "chatId": "[email protected]",
    "expires": 1800,
    "name": "Hypersender",
    "message": {
        "prompt": "Give me link to login at hypersender",
        "success": "Here is your login link: {link}",
        "failed": "Login failed, please try again later.",
        "expired": "The link has been expired, please try another one."
    },
    "callback": {
        "success": "https://yourdomain.com/callback/success",
        "failed": "https://yourdomain.com/callback/failed"
    }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    chatId: '[email protected]',
    expires: 1800,
    name: 'Hypersender',
    message: {
      prompt: 'Give me link to login at hypersender',
      success: 'Here is your login link: {link}',
      failed: 'Login failed, please try again later.',
      expired: 'The link has been expired, please try another one.'
    },
    callback: {
      success: 'https://yourdomain.com/callback/success',
      failed: 'https://yourdomain.com/callback/failed'
    }
  })
};

fetch('https://app.hypersender.com/api/otp/v2/{instance}/generate-link', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.hypersender.com/api/otp/v2/{instance}/generate-link",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'chatId' => '[email protected]',
    'expires' => 1800,
    'name' => 'Hypersender',
    'message' => [
        'prompt' => 'Give me link to login at hypersender',
        'success' => 'Here is your login link: {link}',
        'failed' => 'Login failed, please try again later.',
        'expired' => 'The link has been expired, please try another one.'
    ],
    'callback' => [
        'success' => 'https://yourdomain.com/callback/success',
        'failed' => 'https://yourdomain.com/callback/failed'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.hypersender.com/api/otp/v2/{instance}/generate-link"

	payload := strings.NewReader("{\n  \"chatId\": \"[email protected]\",\n  \"expires\": 1800,\n  \"name\": \"Hypersender\",\n  \"message\": {\n    \"prompt\": \"Give me link to login at hypersender\",\n    \"success\": \"Here is your login link: {link}\",\n    \"failed\": \"Login failed, please try again later.\",\n    \"expired\": \"The link has been expired, please try another one.\"\n  },\n  \"callback\": {\n    \"success\": \"https://yourdomain.com/callback/success\",\n    \"failed\": \"https://yourdomain.com/callback/failed\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.hypersender.com/api/otp/v2/{instance}/generate-link")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"chatId\": \"[email protected]\",\n  \"expires\": 1800,\n  \"name\": \"Hypersender\",\n  \"message\": {\n    \"prompt\": \"Give me link to login at hypersender\",\n    \"success\": \"Here is your login link: {link}\",\n    \"failed\": \"Login failed, please try again later.\",\n    \"expired\": \"The link has been expired, please try another one.\"\n  },\n  \"callback\": {\n    \"success\": \"https://yourdomain.com/callback/success\",\n    \"failed\": \"https://yourdomain.com/callback/failed\"\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.hypersender.com/api/otp/v2/{instance}/generate-link")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"chatId\": \"[email protected]\",\n  \"expires\": 1800,\n  \"name\": \"Hypersender\",\n  \"message\": {\n    \"prompt\": \"Give me link to login at hypersender\",\n    \"success\": \"Here is your login link: {link}\",\n    \"failed\": \"Login failed, please try again later.\",\n    \"expired\": \"The link has been expired, please try another one.\"\n  },\n  \"callback\": {\n    \"success\": \"https://yourdomain.com/callback/success\",\n    \"failed\": \"https://yourdomain.com/callback/failed\"\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "success": true,
  "message": "OTP link request created successfully",
  "data": {
    "uuid": "a0b5e14e-95da-4bd4-9e2a-071661244bef",
    "code": "RDYFQUBX",
    "chat_id": "[email protected]",
    "status": "pending",
    "otp_type": "link",
    "expires_at": "2025-12-29T18:14:55+00:00",
    "created_at": "2025-12-29T17:44:55+00:00",
    "whatsapp_link": "https://wa.me/201553730661?text=Give+me+link+to+login+at+7enkesh+%5BRDYFQUBX%5D+-+DO+NOT+CHANGE+THIS+MESSAGE"
  }
}

Call this endpoint from your server to create a WhatsApp OTP link for passwordless login. Deliver the returned data.whatsapp_link to the user through your app, email, or SMS. When the user opens the link, WhatsApp opens with a prefilled verification message for them to send. Your application handles the result through the success or failure callbacks you configure. This is a WhatsApp-only flow. For a code that the user enters in your app, use Request OTP Code instead.

You need an active Hypersender account, an API token, and an instance UUID. Create an account, then see the OTP API overview for the other OTP flows.

Integration flow

Your backend sends an authenticated request with the recipient’s WhatsApp chatId.
The API returns a unique code, expiry, status, and whatsapp_link.
Your application delivers data.whatsapp_link to the recipient.
The recipient opens the link and sends the prefilled message in WhatsApp.
Your application handles the configured success or failure callback and continues its own flow.

The API specification does not define a callback payload, signature, or redirect parameter. Do not grant access based only on a browser redirect or an undocumented callback field. Confirm callback behavior with your account and validate the event before completing a sensitive action.

Request

Send the request from your backend. Keep the bearer token out of browser code and public repositories. POST https://app.hypersender.com/api/otp/v2/{instance}/generate-link

Authorization: Bearer YOUR_API_TOKEN
Content-Type: application/json

{
  "chatId": "[email protected]",
  "expires": 1800,
  "name": "YourApp",
  "message": {
    "prompt": "Give me link to login at YourApp",
    "success": "Here is your login link: {link}",
    "failed": "Login failed, please try again later.",
    "expired": "This link has expired. Please request another one."
  },
  "callback": {
    "success": "https://yourdomain.com/api/otp/success",
    "failed": "https://yourdomain.com/api/otp/failed"
  }
}

chatId is the recipient’s WhatsApp chat ID. expires is the requested lifetime in seconds. name and message customize the verification messages. The callback URLs are optional; use publicly reachable HTTPS URLs.

Response

On success, the response includes the OTP request details. The generated link is at data.whatsapp_link:

{
  "success": true,
  "message": "OTP link request created successfully",
  "data": {
    "uuid": "a0b5e14e-95da-4bd4-9e2a-071661244bef",
    "code": "RDYFQUBX",
    "chat_id": "[email protected]",
    "status": "pending",
    "otp_type": "link",
    "expires_at": "2025-12-29T18:14:55+00:00",
    "created_at": "2025-12-29T17:44:55+00:00",
    "whatsapp_link": "https://wa.me/201553730661?text=Give+me+link+to+login+at+7enkesh+%5BRDYFQUBX%5D+-+DO+NOT+CHANGE+THIS+MESSAGE"
  }
}

PHP example

This example uses Laravel’s HTTP client. It checks the HTTP response and the documented response envelope before returning the generated WhatsApp link to the caller.

use Illuminate\Support\Facades\Http;
use RuntimeException;

$instance = config('services.hypersender.otp_instance');
$token = config('services.hypersender.otp_token');

$response = Http::withToken($token)
    ->acceptJson()
    ->post("https://app.hypersender.com/api/otp/v2/{$instance}/generate-link", [
        'chatId' => '[email protected]',
        'expires' => 1800,
        'name' => 'YourApp',
        'message' => [
            'prompt' => 'Give me link to login at YourApp',
            'success' => 'Here is your login link: {link}',
            'failed' => 'Login failed, please try again later.',
            'expired' => 'This link has expired. Please request another one.',
        ],
        'callback' => [
            'success' => 'https://yourdomain.com/api/otp/success',
            'failed' => 'https://yourdomain.com/api/otp/failed',
        ],
    ]);

$response->throw();
$whatsappLink = $response->json('data.whatsapp_link');

if (! is_string($whatsappLink) || $whatsappLink === '') {
    throw new RuntimeException('The OTP API response did not include data.whatsapp_link.');
}

// Return or deliver this URL through your application.

Store credentials in server-side environment variables and expose them through Laravel config. The example shows link generation only; connect its result to your own delivery channel and callback handling.

Errors and security

If the request fails, handle the HTTP error and do not deliver a link or treat the user as verified. The published API schema does not list endpoint-specific error codes or response bodies.
Use HTTPS callback URLs and keep the API token server-side.
Apply request limits in your application and avoid logging OTP codes or generated links.
The API specification does not document callback signing or a callback payload. Verify the callback contract for your account before using it to authorize access.

Next steps

OTP API overview

Compare the code and link flows.

Generate an OTP link with Laravel

Use the Hypersender Laravel SDK.

Laravel SDK installation

Install and configure the package.

Try it in Postman

Follow the interactive walkthrough.

Create your Hypersender account

Get an API token and instance UUID to generate your first OTP link.

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

instance

string

required

Hypersender instance UUID

Body

application/json

chatId

string

required

WhatsApp chat ID of the recipient (e.g. [email protected])

expires

integer

TTL in seconds

name

string

message

object

Show child attributes

callback

object

Show child attributes

Response

200 - application/json

Link created

success

boolean

message

string

data

object

Show child attributes

Last modified on November 7, 2026

​Integration flow

​Request

​Response

​PHP example

​Errors and security

​Next steps

OTP API overview

Generate an OTP link with Laravel

Laravel SDK installation

Try it in Postman

Create your Hypersender account

Authorizations

Path Parameters

Body

Response

Integration flow

Request

Response

PHP example

Errors and security

Next steps