> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onepanel.ng/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify the OTP and activate the session

> Once verified, OnePanel keeps the user's MTN login (encrypted) so later transfers need no new OTP. Keep the returned `session_id` for that user.




## OpenAPI

````yaml /openapi.yaml post /airtime-cash/sessions/{id}/verify
openapi: 3.0.3
info:
  title: OnePanel API
  version: 1.0.0
  description: API for OnePanel data vending and transaction management.
servers:
  - url: https://api.onepanel.ng/api/v1
    description: Production
security: []
tags:
  - name: Catalog
  - name: Purchases
  - name: Transactions
  - name: Account
  - name: Airtime Cash
paths:
  /airtime-cash/sessions/{id}/verify:
    post:
      tags:
        - Airtime Cash
      summary: Verify the OTP and activate the session
      description: >
        Once verified, OnePanel keeps the user's MTN login (encrypted) so later
        transfers need no new OTP. Keep the returned `session_id` for that user.
      operationId: verifyAirtimeCashSession
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - otp
              properties:
                otp:
                  type: string
                  example: '123456'
      responses:
        '200':
          description: Session is active.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SessionStarted'
        '401':
          description: Wrong code.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No pending session with this ID.
        '410':
          description: >-
            The code expired or too many wrong attempts were made. Start a new
            session.
      security:
        - ApiKeyAuth: []
        - BearerAuth: []
components:
  schemas:
    SessionStarted:
      type: object
      properties:
        session_id:
          type: string
          example: 3f1c2a9e-5b1d-4f0e-9a58-1d2b7c6e8a10
        status:
          type: string
          enum:
            - pending
            - active
        msisdn:
          type: string
          example: '2348031234567'
        message:
          type: string
    Error:
      type: object
      required:
        - message
      properties:
        message:
          type: string
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-API-Key
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.