Skip to main content
Queue message endpoints are configured with AllowAnonymous().

​
API key header

Pass the X-API-KEY header with a valid app token.
If no valid API key is provided, the API returns 401 Unauthorized.

​
App token behavior

When you use a valid app token, messages are sent using the recipient provided in the request.

​
Message status lookup

Get message status uses the same X-API-KEY header. Only the customer app that submitted the message can look it up, including OTPs sent through Modawer’s shared sender. Dashboard sessions and dev tokens do not replace the app token.