← Back to changelog
October 26, 2026
New
Marketing Automations

OTP templates for the External API Trigger

Merchants on Gupshup can now create Authentication templates for one-time passwords (OTP) and send them from an External API Trigger automation. Your system asks for a code, and DelightChat delivers it on WhatsApp.


Authentication is a new template category in Message Templates. WhatsApp sets the message text and the Copy code button, so there is nothing to write. The message reads "{{1}} is your verification code", and the code is filled in each time you send. Custom message text, headers, footers, buttons and cards are not available for this category.

You can set two optional limits: how long a code stays valid (1 to 90 minutes) and how long WhatsApp keeps trying to deliver the message (30 to 900 seconds).

Authentication templates work only in External API Trigger automations. They do not appear in the template lists for Shopify triggers, Shopify Flow, broadcasts or the inbox. The Authentication category is offered only for Gupshup WhatsApp channels.

How to set it up

  1. Open Message Templates for your Gupshup WhatsApp number and click Create Message Template.
  2. Under Template Category, choose Authentication, choose the language, and set the optional code expiry and delivery time limit.
  3. Click Apply for template and wait for WhatsApp to approve the template.
  4. Open Automations, click Create New Automation, and choose External API Trigger.
  5. Under Configure Message, choose your authentication template and map its code variable. Save the automation. The page then shows the Automation ID and a sample POST request you can copy.
  6. Call that request from your system and include the code to send.

Send the current code in every request. DelightChat does not retry an OTP message with an old code, so to resend, send a new request with a fresh code.

Related setup: Custom Use Cases with WhatsApp Marketing API explains how to create an External API Trigger automation and build the API request. It does not cover Authentication templates.