> ## Documentation Index
> Fetch the complete documentation index at: https://hmis-docs.derrickmugabwa.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Request a patient OTP

> Sends a short-lived OTP to the normalized registration phone. The response does not reveal whether the phone is registered.



## OpenAPI

````yaml /openapi-patient.yaml post /patient/auth/otp/request
openapi: 3.1.0
info:
  title: HMIS Patient Mobile API
  version: 1.0.0
  description: >-
    Patient-owned authentication, appointment, clinical record, and billing
    operations.
servers:
  - url: https://jaliprohmis.derrickmugabwa.dev/api/v1
    description: HMIS staging API
security:
  - bearerAuth: []
tags:
  - name: Patient authentication
  - name: Patient profile
  - name: Patient appointments
  - name: Patient records
  - name: Patient billing
paths:
  /patient/auth/otp/request:
    post:
      tags:
        - Patient authentication
      summary: Request a patient OTP
      description: >-
        Sends a short-lived OTP to the normalized registration phone. The
        response does not reveal whether the phone is registered.
      operationId: requestPatientOtp
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OtpRequest'
      responses:
        '202':
          $ref: '#/components/responses/OtpAccepted'
        '422':
          $ref: '#/components/responses/ValidationError'
        '429':
          $ref: '#/components/responses/RateLimited'
      security: []
components:
  schemas:
    OtpRequest:
      type: object
      required:
        - phone
      properties:
        phone:
          type: string
          maxLength: 32
          example: '+254712345678'
    OtpAcceptedResponse:
      type: object
      properties:
        message:
          type: string
        challenge_id:
          type: string
        expires_in:
          type: integer
  responses:
    OtpAccepted:
      description: Generic OTP request acknowledgement.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/OtpAcceptedResponse'
    ValidationError:
      description: Request validation failed.
    RateLimited:
      description: Too many requests.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: Sanctum patient device token

````