OTP Vault
OTP Vault is a robust, ready-to-use microservice that brings enterprise-grade two-factor authentication (2FA) to any application with minimal effort. Developers simply generate a shared secret once, and thereafter they can request fresh OTPs or verify codes in a matter of milliseconds.
OTP Vault endpoints
| Method | Endpoint | Description |
|---|---|---|
| GET |
GET/api/generate-secret /api/generate-secret |
Produces a unique, base32-encoded secret for each user or device. This secret is the shared key used to synchronize authenticator apps or any TOTP client library. |
| POST |
POST/api/generate-otp /api/generate-otp |
Accepts a secret in the request body and returns the current, valid OTP for that secret. Ideal for backend system that need to push codes via SMS, email or other channels |
| POST |
POST/api/verify-otp /api/verify-otp |
Validates a user-submitted token against the secret, with a configurable time-step window (30 seconds by default). Returns a simple JSON flag indicating success or failure. |
OTP Vault pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $25 / month | — |
|
| ULTRA | $100 / month | — |
|
| MEGA | $250 / month | — |
|