Authentication
Every request to the MiniMoth API must include your project's API key in the X-Api-Key header:
headers: {
'X-Api-Key': 'mm_live_...',
'Content-Type': 'application/json',
} Find or regenerate your key any time from the dashboard under Project → Settings. Regenerating a key immediately invalidates the old one.
Rate limits
| Endpoint | Limit |
|---|---|
| POST /v1/otp/send | 3 per phone per 10 minutes |
| POST /v1/otp/verify | 5 attempts per OTP, then invalidated |
| All endpoints | 1000 requests/min per API key |