Create company email verification code

GraphQL endpoint: /company

Sends a one-time verification code to the given company email address. The response reports the OTP status, its expiry, and the remaining verification attempts.

A partner company whose application the user is in can pass a brandingToken its backend minted (POST /auth/otp-branding-token, bound to this user or to the destination): the email then names that company as what the code is for. Without it the plain TNID message is sent.

Query

mutation (
  $emailId: ID!
) {
  createCompanyEmailVerificationCode (
    emailId: $emailId
  ) {
    expiresAt
    remainingOtpAttempts
    nextOtpAt
    otpStatus
  }
}

Variables

{
  "emailId": "00000000-0000-4000-8000-000000000001"
}

Response

{
  "data": {
    "createCompanyEmailVerificationCode": {
      "expiresAt": "2026-01-15T09:00:00.000000",
      "nextOtpAt": "2026-01-15T09:00:01.000000",
      "otpStatus": "OTP sent",
      "remainingOtpAttempts": 5
    }
  }
}