CM.com One Time Passwords API
Multi-factor authentication (MFA) software
Identity management software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if CM.com One Time Passwords API and its alternatives fit your requirements.
Pay-as-you-go
Free Trial unavailableFree version unavailable
Small
Medium
Large
- Media and communications
- Accommodation and food services
- Banking and insurance
What is CM.com One Time Passwords API
CM.com One Time Passwords API is an API-based service for delivering one-time passwords (OTPs) to support user verification and step-up authentication in customer-facing applications. It is typically used by product and engineering teams to add SMS or voice OTP flows for login, transaction confirmation, and account recovery. The product focuses on message delivery and OTP verification workflows rather than providing a full identity platform with user directories, adaptive policies, or federated SSO.
API-first OTP implementation
The product is designed to be embedded into applications through APIs, which fits teams that want to build custom authentication flows. It supports common OTP use cases such as login verification and transaction confirmation. This approach can reduce dependency on a full IAM suite when OTP is the primary requirement.
Telecom delivery channel options
OTP delivery aligns with telecom channels commonly used for MFA, particularly SMS and voice. This can be useful for reaching users who do not have authenticator apps or hardware tokens. It also supports use cases where phone-number-based verification is required for onboarding or recovery.
Fits customer verification workflows
The service is well-suited to consumer and customer-facing scenarios where OTP is used as a second factor or as a verification step. It can be integrated into existing web and mobile applications without replacing the current identity store. This makes it practical for incremental rollout of MFA in specific journeys.
Not a full identity platform
The product centers on OTP delivery and verification rather than end-to-end identity management. Organizations needing features like SSO, federation (SAML/OIDC), lifecycle management, and centralized policy administration will typically require additional IAM components. As a result, it may not meet broader identity governance or CIAM requirements on its own.
SMS OTP security tradeoffs
If implemented primarily via SMS, OTP-based MFA can be exposed to risks such as SIM swap and SMS interception. Some organizations prefer phishing-resistant authenticators or device-bound credentials for higher assurance. Meeting stronger authentication requirements may require adding other factors beyond OTP.
Integration and ops responsibility
An API-based OTP service places more responsibility on the customer to design flows, handle edge cases, and manage user experience. Teams must implement rate limiting, fraud controls, and fallback/recovery logic in their application layer. Ongoing monitoring of delivery performance and cost management is also typically handled by the customer.
Plan & Pricing
Pricing model: Pay-as-you-go Free tier/trial: No permanently free tier stated on official pages; no explicit time-limited free trial stated on official pages. Example costs (official site):
- Price per verified OTP: Starting at £0.03 (OTP-as-a-Service).
- One-time setup costs per channel: £509 per channel. Notes & exclusions (official site):
- The per-verified-OTP price and setup fees exclude channel costs (conversational channels and SMS) per OTP sent; an extra authentication template update fee may apply for conversational channels. SMS is explicitly excluded from the one-time setup costs.
- Vendor documentation states a subscription is required to use the OTP API; CM.com’s Connections subscription tiers (Go/Basic/Advanced/Pro) are shown on CM.com pricing pages (e.g., Go €49/month, Basic €149/month, Advanced €499/month, Pro €1,499/month) and some Connections plans include capabilities for sending OTP traffic (region- and plan-dependent). Discounts / enterprise: Contact sales for enterprise/volume pricing and region-specific rates. Region notes: CM.com publishes region-specific pricing (examples in GBP, EUR, SEK); per-OTP and channel/SMS costs vary by destination and region.
(Information sourced only from CM.com official product and pricing pages.)
Seller details
CM.com N.V.
Breda, Netherlands
1999
Public
https://www.cm.com/
https://x.com/cmcom
https://www.linkedin.com/company/cm-com/
