Try searching for WooCommerce, Shopify, Abandoned Cart, or Pricing.
39 questions — direct answers, no fluff.
After five incorrect verification attempts, the code is locked and you must request a new one. The API returns the message "Too many incorrect attempts. Request a new code." You cannot retry the same code after reaching this limit.
More details arrow_forwardEach OTP is valid for five minutes from the moment it is sent. After that it expires and returns the error "This code has expired". The successful send response also includes expires_in: 300 so your app can count down.
More details arrow_forwardA phone number can request a new OTP once every 30 seconds. Requesting one sooner returns HTTP 429. After waiting 30 seconds the user can tap resend and a fresh six-digit code is sent to their WhatsApp.
More details arrow_forwardWALoops returns HTTP 429 when a plan's monthly OTP quota is reached. The same status code is also returned when the 30-second resend throttle is hit. Upgrading your plan resets the monthly quota.
More details arrow_forwardA successful send returns a JSON body with success: true and expires_in: 300, meaning the code is valid for 300 seconds (five minutes). A failed send returns an appropriate HTTP error code and an error message instead.
More details arrow_forwardA successful verification returns verified: true in the JSON body. An incorrect code returns verified: false along with an error message. After five wrong attempts the response changes to the too-many-attempts error.
More details arrow_forwardUse the X-API-Key request header and set its value to your WALoops API key. Non-WordPress callers must also include an X-Site-Url header containing the public URL of their application.
More details arrow_forwardNo. The X-Site-Url header is required only for non-WordPress callers. WordPress sites using the WALoops OTP Login plugin do not need to add it manually; the plugin handles authentication with only the X-API-Key header.
More details arrow_forwardPhone numbers must include the country code and contain digits only, with no plus sign, spaces, dashes or brackets. For example, an Indian number should be sent as 919876543210, not +91-98765-43210.
More details arrow_forwardThe purpose field is an optional label attached to the OTP request for your own logs. Documented examples are login, signup and checkout. It does not affect how the OTP is sent or verified.
More details arrow_forwardNo. OTP API requests should be made from server-side code only. Putting your API key in frontend JavaScript exposes it to anyone who views your page source, so all calls to the send and verify endpoints must go through your backend.
More details arrow_forwardPOST to https://app.waloops.com/api/otp/send.php with a JSON body containing the phone field. Include the X-API-Key header with your key and, for non-WordPress apps, the X-Site-Url header with your application's public URL.
More details arrow_forwardPOST to https://app.waloops.com/api/otp/verify.php with a JSON body containing phone and code. Use the same phone number that received the code, the same X-API-Key header, and X-Site-Url if you are not on WordPress.
More details arrow_forwardWALoops returns HTTP 400 when the phone number is missing or invalid. Make sure the number includes the country code and contains digits only before sending the request.
More details arrow_forwardThe Free OTP plan includes 100 OTPs per month sent from the WALoops WhatsApp number, with no credit card required. When you hit 100 you receive HTTP 429 until the next monthly reset.
More details arrow_forwardThe Introduction OTP plan costs $5 or Rs 499 per month and includes 1,000 OTPs per month sent from the WALoops number.
More details arrow_forwardThe Starter OTP plan costs $9.99 or Rs 999 per month and includes unlimited OTPs sent from your own connected WhatsApp number, plus 3,000 monthly credits for OTPs sent from the WALoops number. One OTP from the WALoops number uses one credit.
More details arrow_forwardYes. An Advance account API key can call the OTP API directly. No separate OTP plan is needed if you already have a WALoops Advance subscription.
More details arrow_forwardIf the recipient does not have WhatsApp installed on that number, the OTP cannot be delivered. WALoops uses WhatsApp's messaging infrastructure, so there is no SMS fallback built in.
More details arrow_forwardNo. DLT registration is required for SMS in India, not for WhatsApp. WALoops OTPs use a Meta-approved authentication template, and on the WALoops number that approval is already in place.
More details arrow_forwardNo. On the Free plan, OTPs are sent from the WALoops WhatsApp number and no Meta developer account or Business API setup is required on your side. You only need a WALoops API key.
More details arrow_forwardThe WALoops OTP API supports any language that can make an HTTPS POST request with a JSON body. Official code examples are provided for cURL, PHP, Node.js and Python.
More details arrow_forwardYes. Connect the WALoops MCP server to an MCP-compatible AI coding assistant and it can call tools to send and verify OTPs, check usage and work with approved WhatsApp templates. A free OTP key works without any Meta setup.
More details arrow_forwardRun: claude mcp add --transport http waloops https://app.waloops.com/api/mcp.php --header "Authorization: Bearer YOUR_API_KEY". The get_started tool in the server explains available tools and key types.
More details arrow_forwardThe WALoops WordPress OTP Login plugin offers three form styles: Modern, Minimal and Card. You select the style in Settings > WhatsApp OTP Login inside your WordPress admin.
More details arrow_forwardContact Form 7, WPForms, Gravity Forms and Formidable Forms support OTP verification fields through the plugin. Ninja Forms support is experimental and should be tested before relying on it. Elementor Pro Forms, Fluent Forms and SureForms are not supported.
More details arrow_forwardNo. The plugin adds a separate WhatsApp OTP login option but does not replace or remove the site's existing username-and-password login form. Both methods remain available to users.
More details arrow_forwardUse the [wa_otp_login] shortcode to embed the OTP login form anywhere on your site, such as a custom login page, a page builder block or a widget area.
More details arrow_forwardYes. The plugin can optionally send six-digit login codes by email without using the OTP API. Email-code OTPs are valid for 10 minutes and are single-use, compared to five minutes for WhatsApp OTPs.
More details arrow_forwardThe WALoops OTP Login plugin requires WordPress 5.8 or later and PHP 7.4 or later. Check your hosting dashboard to confirm the versions running on your server before installing.
More details arrow_forwardYes. When a user requests a code, the plugin sends their phone number to WALoops to dispatch the OTP. When they submit the code, the plugin also sends the phone number and code to WALoops for verification.
More details arrow_forwardInstall the free WALoops OTP Login plugin from WordPress.org, open Settings > WhatsApp OTP Login, click "Get your free API key" and paste it in. Then add the [wa_otp_login] shortcode to your login page or enable the plugin's login page option.
More details arrow_forwardYes. The WALoops Express Checkout plugin adds WhatsApp OTP to a WooCommerce one-page checkout. The free WALoops WooCommerce plugin also covers COD OTP verification before orders are placed.
More details arrow_forwardIt is a free WordPress.org plugin that adds a slide-in side cart and a one-page express checkout to WooCommerce, with WhatsApp OTP, email code or password login and Cash on Delivery controls. The Pro version costs $79 a year and adds upsells, bundle discounts and prepaid or COD pricing rules.
More details arrow_forwardAfter installing the WALoops OTP Login plugin, the settings are at Settings > WhatsApp OTP Login in your WordPress admin dashboard. That is where you paste your API key and choose the form style.
More details arrow_forwardNo. Each OTP code can be used only once. After a successful verification the code is consumed and cannot be reused. You must request a new code for any subsequent login or verification.
More details arrow_forwardConnect an AI coding assistant to the WALoops MCP server, then prompt it to build a login flow that sends a code with send_otp and checks it with verify_otp. The WALoops WhatsApp OTP API page also has REST examples for PHP, Node.js, Python and cURL.
More details arrow_forwardYes. WALoops OTP messages use a Meta-approved authentication template. On the WALoops number that approval is already in place, so you do not need to submit or manage any template yourself on the Free or Introduction plans.
More details arrow_forwardYes. The free WALoops WooCommerce plugin sends a WhatsApp OTP before COD orders are placed. The OTP goes from the WALoops number, so no Meta developer setup is needed, and the first 100 messages are free.
More details arrow_forwardOfficial WhatsApp Business API, Meta's own message rates, Shopify and WooCommerce automation.
✓ No credit card required ✓ 7-day free trial ✓ Cancel anytime
