For Agents
Install Jentic One Beta
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Number Verification API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | shStep 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with Number Verification API.
Verify that a user-supplied phone number matches the device's currently registered mobile number
Retrieve the device phone number directly from the mobile network operator without an SMS round trip
Replace SMS one-time passwords with silent network-level identity verification for sign-up flows
GET STARTED
Verify that a phone number belongs to the device making the request, using mobile network signals instead of SMS OTPs. Returns a boolean match result for the supplied number.
Use for: Verify the phone number entered during sign-up actually belongs to this device, Check whether a user's claimed mobile number matches the SIM in their phone, Get the phone number registered to the current mobile session, Replace SMS OTP with silent network verification for a login flow
Not supported: Does not handle SMS delivery, voice OTPs, or KYC document verification — use for silent network-based phone number verification only.
Telefonica's Open Gateway Number Verification API confirms whether a phone number provided by an end user matches the number actually in use on the device making the request. It does this by checking the IP address allocated by the mobile network operator against the subscriber's registered MSISDN, eliminating the need for SMS-based one-time passwords. The API is part of the GSMA CAMARA Open Gateway initiative and uses OAuth 2.0 with the network-based authentication flow defined in the standard.
Block account takeover attempts where the attacker's device is on a different SIM than the claimed number
Confirm subscriber number ownership before allowing high-risk transactions such as payment authorisation
Patterns agents use Number Verification API for, with concrete tasks.
★ Silent Sign-Up Verification
Replace SMS one-time passwords with a single POST /verify call that confirms the user-entered phone number matches the device's network-registered number. The check happens silently on the mobile data connection so there is no code-entry step. This reduces drop-off in onboarding flows and removes a costly SMS gateway dependency.
Call POST /verify with the user-entered phone number and assert the returned devicePhoneNumberVerified field is true before allowing account creation.
SIM Swap Risk Mitigation at Login
Before authorising a sensitive action such as a password reset or payment, call GET /device-phone-number to retrieve the current network-registered number and compare it to the number on file. A mismatch is a strong signal of SIM swap or account takeover and should trigger step-up authentication. The API runs on Telefonica's Open Gateway, available across participating mobile networks.
Call GET /device-phone-number on the current session and compare the response to the user's stored phone number; if they differ, return a step-up authentication challenge.
AI Agent Identity Verification via Jentic
Agents that perform regulated actions such as payments or account changes can call Number Verification through Jentic to confirm the requesting device's number matches the user record. Jentic vaults the OAuth 2.0 client credentials and returns a structured boolean result, so the agent never handles raw network tokens.
Use Jentic to search for 'verify a phone number against the device', execute POST /verify with the user's claimed number, and return whether the verification succeeded.
2 endpoints — telefonica's open gateway number verification api confirms whether a phone number provided by an end user matches the number actually in use on the device making the request.
METHOD
PATH
DESCRIPTION
/verify
Verify a phone number matches the device's registered number
/device-phone-number
Get the device's network-registered phone number
/verify
Verify a phone number matches the device's registered number
/device-phone-number
Get the device's network-registered phone number
Three things that make agents converge on Jentic-routed access.
Credential isolation
Telefonica Open Gateway uses OAuth 2.0 client credentials. Jentic stores them in the MAXsystem vault and issues a short-lived bearer token to the agent, so the client_secret never appears in the agent context.
Intent-based discovery
An agent searches Jentic with an intent like 'verify a phone number against the device' and receives the POST /verify operation with its request schema, so it can invoke the call without parsing the OpenAPI spec.
Time to first call
Direct Telefonica Open Gateway integration: 1-2 weeks for onboarding, OAuth client provisioning, and CAMARA flow handling. Through Jentic: under 1 hour once the credentials are vaulted.
Alternatives and complements available in the Jentic catalogue.
Specific to using Number Verification API through Jentic.
What authentication does the Number Verification API use?
OAuth 2.0 with the CAMARA network-authenticated authorisation flow. Through Jentic the OAuth client credentials are stored in the vault and the agent receives a scoped token rather than the raw client secret.
Can I verify a phone number without sending an SMS with the Number Verification API?
Yes. POST /verify checks the user-entered number against the IP-to-MSISDN binding maintained by the mobile network operator, so no SMS or one-time code is sent. The request must originate from the device's mobile data connection rather than Wi-Fi.
What are the rate limits for the Number Verification API?
Telefonica does not publish a single global rate limit; quotas are issued per OAuth client and depend on the commercial agreement with Telefonica Open Gateway. Apply standard per-user throttling to avoid quota exhaustion in onboarding flows.
How do I verify a user's phone number with the Number Verification API through Jentic?
Search Jentic for 'verify a phone number against the device', load POST /verify, and execute it with the user-supplied phoneNumber. Jentic injects the OAuth bearer token from the vault before forwarding the call.
Does the Number Verification API work over Wi-Fi?
No. The verification relies on the IP address allocated by the mobile network operator, so the request must come from the device's mobile data session. If the device is on Wi-Fi, fall back to GET /device-phone-number once mobile data is available, or to a different verification method.
Which countries does the Number Verification API cover?
The API runs on Telefonica's Open Gateway and is available in markets where Telefonica or a CAMARA federation partner operates the mobile network. Coverage is negotiated per commercial agreement; check with Telefonica before depending on it in a region you have not contracted for.