Flow in a minute
- The user enters a number in your form.
- Your server normalizes the phone (for KZ often
8…→7…) and callsPOST https://cascade.kz/api/otp/sendwith a Bearer token. - Cascade delivers the code via WhatsApp, Telegram or SMS — depending on
channelor the “Where to send from” setting in the cabinet. - The user enters the code.
- The server calls
POST /otp/verifywith the samephoneandpurpose. - On success you grant access to the account or operation.
Resending to the same number is limited to about once per 60 seconds — show a timer in the UI. Do not call the API from the browser: the key must live only on the backend. If the balance is insufficient, you get an insufficient-tokens message — see top-up and pricing. For short links in the same message, pass the link field. More scenarios — in use-cases, errors — in errors, product overview — in about.