Verify Onboarding OTP
pop_onboarding_verify_otpVerify the OTP from email and obtain an onboarding token needed for subsequent POP onboarding steps. The token expires after 30 minutes.
Instructions
Verify the OTP from pop_onboarding_request_otp and obtain an onboarding token.
This is step 2 of 5 in the onboarding sequence.
Key behaviours:
Returns an onboarding_token (48-character string). Save it — required for all subsequent steps.
Token expires 30 minutes after issue. No refresh endpoint; restart from request-otp if expired.
token_issued_at and token_expires_at are ISO 8601 strings (e.g. 2026-05-26T13:47:15+00:00).
wizard_variant is 'basic' if no country is saved yet — it updates after save_account_setup sets the country.
If wizard_required is false after this step, the account is already fully set up. No further steps needed.
For administrator accounts: pass the admin password as the otp field.
No API key required for this call.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| otp | Yes | 6-digit OTP from the request-otp response (or the administrator password for admin accounts) | |
| Yes | Must match the email used in pop_onboarding_request_otp | ||
| site_id | No | Optional caller site domain or identifier | |
| platform | No | Client identifier recorded in the session. Default: 'mcp' | mcp |