Authentication platform — OTP as the distinctive verification channel.

$ curl -X POST https://api.kolayotp.com/v1/auth/sign-in/email-password \
    -H "X-KolayOTP-Publishable-Key: pk_live_..." \
    -H "Content-Type: application/json" \
    -d '{"email":"you@acme.com","password":"••••••••"}'

# Session cookies: __session (JWT) + __client (refresh)
# Optional AAL2: POST /v1/auth/sign-in/mfa/totp

$ curl -X POST https://api.kolayotp.com/api/v1/otp/send \
    -H "Authorization: Bearer kotp_live_..." \
    -H "idempotency-key: $(uuidgen)" \
    -d '{"recipient":"+905551234567","locale":"tr"}'

import { AuthClient } from "@kolayotp/auth-client";
import { KolayOTP } from "@kolayotp/sdk";

const auth = new AuthClient({
  publishableKey: process.env.PK_KEY!,
  baseUrl: "https://api.kolayotp.com",
});

const session = await auth.signInEmailPassword({
  email: "you@acme.com",
  password: process.env.USER_PASSWORD!,
});
// Cookies / JWT minted by KolayOTP — no local session.create()

const kotp = new KolayOTP({ apiKey: process.env.KOTP_KEY });
const otp = await kotp.send({ recipient: "+905551234567", locale: "tr" });
await kotp.verify({ id: otp.id, code: "482913" });

{
  "mcpServers": {
    "kolayotp": {
      "command": "npx",
      "args": ["-y", "@kolayotp/mcp"],
      "env": {
        "KOLAYOTP_API_KEY": "kotp_test_..."
      }
    }
  }
}

# Tools exposed to the agent:
#   otp_send     otp_verify
#   otp_resend   otp_status
#   balance_get