Docs/TurnKit Auth with Brevo
Guides

TurnKit Auth with Brevo

Use Brevo SMTP with TURNKIT_AUTH to let players sign in with email OTP. This is the fastest setup if you want TurnKit to handle auth for you.

Create Brevo Account

  1. Open Brevo registration and create your account.

Copy SMTP Credentials

  1. Open Brevo real-time SMTP.
  2. Copy the login and password shown there.

Configure TurnKit Auth

In your game dashboard, open Player Authentication Mode and switch it to TURNKIT_AUTH.

Client flow

  1. Fill the SMTP fields below and press SAVE.
  2. Client calls /v1/client/auth/otp/request and /v1/client/auth/otp/verify.
  3. Use the returned player JWT in Authorization: Bearer <player-jwt> for normal client calls.
FieldValue
SMTP HOSTsmtp-relay.brevo.com
PORT465
USERNAMELogin from Brevo real-time SMTP page
PASSWORDPassword from Brevo real-time SMTP page
FROMThe email address you used to sign up with Brevo
NAMEYour game name
TurnKit sends the OTP email through these SMTP credentials. After verification succeeds, the client uses the returned player JWT for authenticated client API calls.
Current API behavior: send OTP requests as JSON with Content-Type: application/json. Default limits are 5 requests per 10 minutes for /v1/client/auth/otp/request and 10 requests per 10 minutes for /v1/client/auth/otp/verify.

Sender Note

Note: If the email you used in Brevo is not verified for your website domain, the sender will still use your email name, but Brevo may send from an address ending in @random_number.brevosend.com.