> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.aurasos.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.aurasos.com/_mcp/server.

# Start customer registration

POST https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start
Content-Type: application/json

Sends a one-time code by SMS to the mobile number and opens a short-lived verification session. No customer is created until the session is completed. The response is the same whether or not the number already belongs to a customer.

Reference: https://docs.aurasos.com/api-reference/authentication/start-customer-registration

## Servers

- `https://staging-panic.aura.services` (Staging, default)
- `https://panic.aura.services` (Production)

## Request

### Headers

- `x-app-platform` (enum, optional) — Sent by the mobile apps. Case-insensitive, and optional. Only ios and android are accepted; any other value is rejected with 400. White-label signup restrictions apply to every new number, whether or not this header is sent.
  - Allowed values: `ios`, `android`

### Body (application/json)

This endpoint expects a RegistrationStartRequest.

- `clientId` (string, required) — The customer source client id the app is built for.
- `mobileNumber` (string, required) — Mobile number in international format.
- `hasAcceptedTermsAndConditions` (boolean, required) — Must be `true`.
- `referralCode` (string, optional) — Optional referral code, linked to the customer when a new customer is created.
- `platformDetails` (map from string to any, optional) — Optional app and device details, stored when a new customer is created.

## Response

### 202

The code was sent and the verification session is open.

- `verificationId` (string, required) — Send this with the code to complete registration.
- `expiresAt` (datetime, required) — The session and code stop working at this time.

## Errors

### 400 Bad Request Error

The request body or x-app-platform header is invalid, the terms were not accepted, or the code could not be sent to this number.

- `error` (enum, required)
  - Allowed values: `invalid_request`, `unknown_client`, `otp_not_sent`, `verification_superseded`, `verification_failed`, `not_eligible`, `verification_not_found`, `verification_expired`, `too_many_attempts`, `rate_limited`
- `message` (string, optional)
- `errors` (map from string to list of string, optional) — Field-level validation errors, returned with `invalid_request`.
- `attemptsRemaining` (integer, optional) — Returned with `verification_failed`.

### 404 Not Found Error

The client id does not belong to a customer source.

- `error` (enum, required)
  - Allowed values: `invalid_request`, `unknown_client`, `otp_not_sent`, `verification_superseded`, `verification_failed`, `not_eligible`, `verification_not_found`, `verification_expired`, `too_many_attempts`, `rate_limited`
- `message` (string, optional)
- `errors` (map from string to list of string, optional) — Field-level validation errors, returned with `invalid_request`.
- `attemptsRemaining` (integer, optional) — Returned with `verification_failed`.

### 409 Conflict Error

Another start for the same number replaced this session while its code was being sent. Use the verification id from the other response.

- `error` (enum, required)
  - Allowed values: `invalid_request`, `unknown_client`, `otp_not_sent`, `verification_superseded`, `verification_failed`, `not_eligible`, `verification_not_found`, `verification_expired`, `too_many_attempts`, `rate_limited`
- `message` (string, optional)
- `errors` (map from string to list of string, optional) — Field-level validation errors, returned with `invalid_request`.
- `attemptsRemaining` (integer, optional) — Returned with `verification_failed`.

### 429 Too Many Requests Error

Too many requests. Back off until the `RateLimit-Reset` window passes.

- `message` (string, optional)
- `errors` (ErrorResponseErrors, optional) — Error detail. May be a string, an array of strings, or an object (some routes return a serialized error object).

### 500 Internal Server Error

Unexpected server error.

- `message` (string, optional)
- `errors` (ErrorResponseErrors, optional) — Error detail. May be a string, an array of strings, or an object (some routes return a serialized error object).

## Types

### ErrorResponseErrors

Error detail. May be a string, an array of strings, or an object (some routes return a serialized error object).

- string
- list of string
- map from string to any

## Examples

**Request**

```json
{
  "clientId": "client_id_example",
  "mobileNumber": "+27821234567",
  "hasAcceptedTermsAndConditions": true
}
```

**Response**

```json
{
  "verificationId": "3f0b1f5e-8f5c-4b8e-9f3a-2d6c1f9b7a10",
  "expiresAt": "2026-10-16T08:05:00.000Z"
}
```

**SDK Code**

```python Success
import requests

url = "https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start"

payload = {
    "clientId": "client_id_example",
    "mobileNumber": "+27821234567",
    "hasAcceptedTermsAndConditions": True
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.json())
```

```javascript Success
const url = 'https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: '{"clientId":"client_id_example","mobileNumber":"+27821234567","hasAcceptedTermsAndConditions":true}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go Success
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start"

	payload := strings.NewReader("{\n  \"clientId\": \"client_id_example\",\n  \"mobileNumber\": \"+27821234567\",\n  \"hasAcceptedTermsAndConditions\": true\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby Success
require 'uri'
require 'net/http'

url = URI("https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"clientId\": \"client_id_example\",\n  \"mobileNumber\": \"+27821234567\",\n  \"hasAcceptedTermsAndConditions\": true\n}"

response = http.request(request)
puts response.read_body
```

```java Success
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.post("https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start")
  .header("Content-Type", "application/json")
  .body("{\n  \"clientId\": \"client_id_example\",\n  \"mobileNumber\": \"+27821234567\",\n  \"hasAcceptedTermsAndConditions\": true\n}")
  .asString();
```

```php Success
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('POST', 'https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start', [
  'body' => '{
  "clientId": "client_id_example",
  "mobileNumber": "+27821234567",
  "hasAcceptedTermsAndConditions": true
}',
  'headers' => [
    'Content-Type' => 'application/json',
  ],
]);

echo $response->getBody();
```

```csharp Success
using RestSharp;

var client = new RestClient("https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start");
var request = new RestRequest(Method.POST);
request.AddHeader("Content-Type", "application/json");
request.AddParameter("application/json", "{\n  \"clientId\": \"client_id_example\",\n  \"mobileNumber\": \"+27821234567\",\n  \"hasAcceptedTermsAndConditions\": true\n}", ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
```

```swift Success
import Foundation

let headers = ["Content-Type": "application/json"]
let parameters = [
  "clientId": "client_id_example",
  "mobileNumber": "+27821234567",
  "hasAcceptedTermsAndConditions": true
] as [String : Any]

let postData = JSONSerialization.data(withJSONObject: parameters, options: [])

let request = NSMutableURLRequest(url: NSURL(string: "https://staging-panic.aura.services/panic-api/v2/oauth/registrations/start")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "POST"
request.allHTTPHeaderFields = headers
request.httpBody = postData as Data

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```