# Token

### UUID

**Required**  
A unique token returned as part of a /v1/three\_ds\_authentication/simulate call that resulted in PENDING\_CHALLENGE authentication result.

### OTP

**String**  
**Required**  
The OTP entered by the cardholder

## Response Codes

### `200`
OK

### `400`
A parameter in the query given in the request does not match the valid queries for the endpoint.

### `401`
| Description | Reason |
| --- | --- |
| User has not been authenticated | Invalid or missing API key |
| API key is not active | The API key used is no longer active |
| Could not find API key | The API key provided is not associated with any user |
| Please provide API key in Authorization header | The Authorization header is not in the request |
| Please provide API key in the form Authorization: [api-key] | The Authorization header is not formatted properly |
| Insufficient privileges. Issuing API key required | Write access requires an Issuing API key. Reach out at [lithic.com/contact](/content/contact/index.html) |
| Insufficient privileges to create virtual cards. | Creating virtual cards requires an additional privilege |

### `404`
The specified resource was not found.

### `422`
Unprocessable entity.

### `429`
Client has exceeded the number of allowed requests in a given time period.  
| Description | Reason |
| --- | --- |
| Rate limited, too many requests per second | User has exceeded their per second rate limit |
| Rate limited, reached daily limit | User has exceeded their daily rate limit |
| Rate limited, too many keys tried | One IP has queried too many different API keys |

## Example Request

```bash
curl --request POST \
     --url https://sandbox.lithic.com/v1/three_ds_decisioning/simulate/enter_otp \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --data '
{
  "token": "fabd829d-7f7b-4432-a8f2-07ea4889aaac",
  "otp": "123456"
}
'  
```

### Click `Try It!`

to start a request and see the response here! Or choose an example:

**Response Format**  
application/json

### Response Codes  
`400` `401` `404` `422` `429`

*Updated 3 months ago*