Verify PEP Access
POST
/pep/verify-accessOpen in the API playground →
Verify the 6-digit OTP and grant temporary access to PEP account data.
Endpoint
POST /api/v1/pep/verify-access
Authentication
Authorizationstringheaderrequired
Bearer token (Admin JWT with pep_access_authorized: true)
Request Body
subscriber_idstringbodyrequired
PEP subscriber UUID
otp_codestringbodyrequired
6-digit OTP code received
Response
{
"success": true,
"message": "Access granted"
}
Security Notes
- OTP verification is required for each session
- Access is time-limited
- All access attempts are logged for audit
- IP address and user agent are recorded
Errors
| Code | Description |
|---|---|
| 400 | Invalid OTP or expired |
| 401 | User not authenticated |
| 403 | Not authorized for PEP access |
| 500 | Internal server error |