API for developers

The confirmation and messaging API for your applications.

Sign-in, password reset, payment: instead of sending an SMS OTP, you send a request. Your user confirms on their phone, your server receives the signed answer. No more paying for every SMS.

Create a developer account Read the documentation

Your users install eNotif once: Download for Android(Version 1.0.0 · 35 Mo) Open the web version

How it works

One SMS, once, to link the number to the phone. After that, every confirmation goes through the device.

01

The app sends a request

One call to the person’s number, with what they need to see: the action, the browser, the amount.

02

The person confirms on their phone

They see who is asking and why. Approve or Deny: the answer is signed by the phone.

03

Your server gets the answer

A signed webhook, request.approved or request.denied, within seconds.

For developers

SMS OTPs are expensive. An eNotif request replaces them.

  • One SMS per phone, at sign-up, sent by eNotif. After that, no SMS to pay for.
  • Approve / Deny, or a 6-digit code shown in the app: your choice, request by request.
  • Simple fallback: if the number is not on eNotif, the response says so and you send your usual SMS.
  • Sandbox open from sign-up, with your own testers.
Create a developer account Read the documentation
POST /v1/requestscurl
curl https://enotif.sahelab.com/v1/requests \
  -H "Authorization: Bearer sk_test_…" \
  -H "Content-Type: application/json" \
  -d '{
    "phone": "+22370000001",
    "action": "login",
    "title": "Sign in to Sahelab",
    "context": [{ "label": "Location", "value": "Bamako" }],
    "number_matching": true
  }'
Webhook receivedrequest.approved
X-ENotif-Signature: t=1791370812,v1=5f2b…c9

{
  "id": "evt_3NfQ8rT2LmZx9KpW",
  "type": "request.approved",
  "data": { "object": {
    "id": "req_7Hq2kLmN3pQrS8tUvWx1Yz",
    "user": "usr_Q4mZ9xK2pL7nR1sT",
    "status": "approved"
  } }
}

Built to be trusted

The key never leaves the phone

Every answer is signed by the device. Our servers never see the private key.

Signed webhooks

Timestamped HMAC-SHA256, automatic retries, replayable from the console.

Number matching

The person taps the number shown on your page. A request triggered elsewhere does not get through.

Sandbox

Test keys, testers invited by @handle, requests simulated from the console.

Install eNotif

Your number, a code by SMS, and you are set.

Download for Android Open the web version

Android · Version 1.0.0 · 35 Mo

Start in the sandbox

An account, a test key, your first request in five minutes.

Create a developer account Read the documentation