API Documentation

Include the X-API-KEY header in every request.

List of apps/services with price and stock. (public)

curl https://zerotp.com/api/v1/services

Create an order. JSON body: application_id (required), operator (normal|promo|special), custom_user_id (optional).

curl -X POST https://zerotp.com/api/v1/orders \
  -H 'X-API-KEY: YOUR_KEY' -H 'Content-Type: application/json' \
  -d '{"application_id": 1, "operator": "normal"}'

Check order status & get the OTP (otp_code, sms_text).

curl https://zerotp.com/api/v1/orders/123 -H 'X-API-KEY: YOUR_KEY'

Cancel (refunds balance if no SMS yet) or mark as finished.

curl -X POST https://zerotp.com/api/v1/orders/123/cancel -H 'X-API-KEY: YOUR_KEY'

If callbacks are enabled under the API & Callback menu, the system will POST JSON to your URL when an OTP is received:

{
  "order_id": 123,
  "phone_number": "628xxx",
  "otp_code": "123456",
  "sms_text": "Your code is 123456",
  "status": "completed"
}

The Modempool app (.exe) uses the X-AGENT-KEY header (reseller agent key).

Sign up / enable yourself as a reseller to get an agent key.

Register/sync a list of modems. Idempotent per modem uid.

curl -X POST https://zerotp.com/api/modem/sync \
  -H 'X-AGENT-KEY: YOUR_AGENT_KEY' -H 'Content-Type: application/json' \
  -d '{"modems":[{"uid":"COM3","phone_number":"628111","provider":"Telkomsel","signal":80,"mapping":"normal"}]}'

Send periodic (batch) status so modems are considered online and orderable.

curl -X POST https://zerotp.com/api/modem/heartbeat \
  -H 'X-AGENT-KEY: YOUR_AGENT_KEY' -H 'Content-Type: application/json' \
  -d '{"modems":[{"uid":"COM3","signal":75,"can_order":true}]}'

Report an incoming SMS. The system automatically matches it to a pending order and extracts the OTP.

curl -X POST https://zerotp.com/api/modem/inbound-sms \
  -H 'X-AGENT-KEY: YOUR_AGENT_KEY' -H 'Content-Type: application/json' \
  -d '{"uid":"COM3","phone_number":"628111","from":"WhatsApp","text":"Your code is 123-456"}'