# How do I connect to the Nexmo SMS verify service with the WebAPI?

**URL:** <https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549>\
**Category:** Questions about Thunkable X\
**Tags:** sms, webapi\
**Created:** [April 29, 2019, 4:10pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549 "2019-04-29T16:10:17Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 29, 2019, 4:10pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/1 "2019-04-29T16:10:17Z")

</div>

I’m trying to make a GET request to nexmo’s SMS verify service, but I get this error:

“Invalid value for param: app\_id. Facility not allowed”

 ![photo_2019-04-29_18-01-53](https://us1.discourse-cdn.com/flex015/uploads/thunkable/original/3X/1/d/1d6a8ef04b2c75e48ca3a5a7b75a77c2fefc9447.jpeg)

---

<div class="post-metadata">

**Author:** ![Cian\_O\_Sullivan](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/cian_o_sullivan/32/34494_2.png) [@Cian\_O\_Sullivan](https://community.thunkable.com/u/Cian_O_Sullivan)\
**Post date:** [April 29, 2019, 4:28pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/2 "2019-04-29T16:28:36Z")

</div>

If you want to private message me the URL I can test it out

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 29, 2019, 7:56pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/3 "2019-04-29T19:56:40Z")

</div>

This is the documentation:

> **[Nexmo Developer | Send verification code](https://developer.nexmo.com/verify/code-snippets/send-verify-request)**
>
> Everything you need to build connected applications with Nexmo

or this

[https://developer.nexmo.com/api/verify#verifyRequest](https://developer.nexmo.com/api/verify#verifyRequest)

---

<div class="post-metadata">

**Author:** ![Cian\_O\_Sullivan](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/cian_o_sullivan/32/34494_2.png) [@Cian\_O\_Sullivan](https://community.thunkable.com/u/Cian_O_Sullivan)\
**Post date:** [April 29, 2019, 8:07pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/4 "2019-04-29T20:07:16Z")

</div>

Thanks for that. However I cant help if I cant see the URL you are using.

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 29, 2019, 8:21pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/5 "2019-04-29T20:21:26Z")

</div>

The URL contains my api secret and I can’t share it with you, you can easily create an account for yourself and test it out

---

<div class="post-metadata">

**Author:** ![Cian\_O\_Sullivan](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/cian_o_sullivan/32/34494_2.png) [@Cian\_O\_Sullivan](https://community.thunkable.com/u/Cian_O_Sullivan)\
**Post date:** [April 29, 2019, 8:34pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/6 "2019-04-29T20:34:08Z")

</div>

Well create yourself a second account with an API and send the URL.

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 29, 2019, 8:37pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/7 "2019-04-29T20:37:52Z")

</div>

They request a phone number for verification purpose

---

<div class="post-metadata">

**Author:** ![Avram](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/avram/32/13989_2.png) [@Avram](https://community.thunkable.com/u/Avram)\
**Post date:** [April 30, 2019, 12:20am UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/8 "2019-04-30T00:20:57Z")

</div>

Why don’t you contact Nexmo support and ask them about the error you’re getting?

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 30, 2019, 11:23am UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/9 "2019-04-30T11:23:40Z")

</div>

I did and they couldn’t help me since the service is working if i use the exact same link in the browser i receive the SMS to my phone, but it doesn’t work if i create a GET request from the app

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 30, 2019, 11:42am UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/10 "2019-04-30T11:42:05Z")

</div>

Is this use of web api correct?

BTW: this is not secure method, right? Since if somebody decompiles my apk they can find the secret key, how can I do to make it secure?

 ![Screenshot_2019-05-18%20Thunkable](https://us1.discourse-cdn.com/flex015/uploads/thunkable/original/3X/0/d/0dcaa25b57a1ce9198b68b05eee0c787db32806e.png)

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 30, 2019, 12:06pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/11 "2019-04-30T12:06:39Z")

</div>

@domhnallohanlon I just received an answer from he nexmo support that showed me that the request that my app sends to their service is this one:

api\_key=ea8575cd&api\_secret=-REDACTED-&number=-REDACTED-&brand=AcmeInc&app\_id=47433b2b-e24a-47a4-9715-\*\*\*\*\*\*\*\*\*\* (I censored the rest of it)

but this last “&app\_id=47433b2b-e24a-47a4-9715-\*\*\*\*\*\*\*\*\*” part is added by the app and therefore the nexmo API gives an error as it should not be there, it is not in the API request URL I wrote, so I should remove it, any idea, any help?

---

<div class="post-metadata">

**Author:** ![Cian\_O\_Sullivan](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/cian_o_sullivan/32/34494_2.png) [@Cian\_O\_Sullivan](https://community.thunkable.com/u/Cian_O_Sullivan)\
**Post date:** [April 30, 2019, 12:30pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/12 "2019-04-30T12:30:07Z")

</div>

MaxB

Remove the URL, and populate these fields in the Design window and try again.

Also set a label for the URL and post the URL just before the call to see where the extra info is being added.

 ![image](https://us1.discourse-cdn.com/flex015/uploads/thunkable/original/3X/0/0/003f3bfc2ac7b1b699223ff412d4cc5070b6e14e.png)

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 30, 2019, 12:40pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/13 "2019-04-30T12:40:03Z")

</div>

It was my fault,

I did change those values when I was trying to use the web api for the one signal notification and didn’t reset them.

So thank you @Cian_O_Sullivan, thank you @Avram, sorry @domhnallohanlon for bothering you too

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [April 30, 2019, 1:12pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/14 "2019-04-30T13:12:53Z")

</div>

And only now I notice that I still need firebase security for user data… I am trying to avoid email signing but I don’t know if and how I can use firebase SMS verification in thunkable, any help for firebase security/SMS verification?

---

<div class="post-metadata">

**Author:** ![maxb](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/maxb/32/35200_2.png) [@maxb](https://community.thunkable.com/u/maxb)\
**Post date:** [May 18, 2019, 11:10am UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/15 "2019-05-18T11:10:29Z")

</div>

@domhnallohanlon since this was an oversight of mine and not a thunkable problem, should i delete this thread?

---

<div class="post-metadata">

**Author:** ![domhnallohanlon](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/domhnallohanlon/32/29554_2.png) [@domhnallohanlon](https://community.thunkable.com/u/domhnallohanlon)\
**Post date:** [May 18, 2019, 12:55pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/16 "2019-05-18T12:55:25Z")

</div>

Thanks for the update @maxb, I don’t think there’s any need to delete this, but I’d made a few small edits to make this topic more relevant to future readers.

The title has been changed to indicate that service you are trying to connect to and you first post has been edited to include the text of the error message so that anyone having issues with the WebAPI will be able to find this by searching. I’ve PMed you about one small update that would be great to have from you too.

Thanks!

---

<div class="post-metadata">

**Author:** ![ioannis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/ioannis/32/146956_2.png) [@ioannis](https://community.thunkable.com/u/ioannis)\
**Post date:** [November 8, 2024, 12:13pm UTC](https://community.thunkable.com/t/how-do-i-connect-to-the-nexmo-sms-verify-service-with-the-webapi/75549/17 "2024-11-08T12:13:41Z")

</div>


