📱 MsglyAPI is a website and software-as-a-service backend server providing SMS, email, and verification services.
A comprehensive, enterprise-grade system with cloud backend, Firebase database, and Android Termux SMS gateway.
[Client] → [Nginx/SSL] → [Digital Ocean Backend] → [Portmap.io] → [Android Termux SMS Server]
↓
[Firebase Database]
- Multi-User System: Firebase-based user management with individual API keys
- Quota Management: Configurable OTP limits per user with auto-expiry
- Smart OTP: Word-based verification codes disguised as natural messages
- Direct Messaging: Send custom SMS messages through the same gateway
- Real-time Analytics: Comprehensive usage statistics and monitoring
- Enterprise Authentication: Separate user and admin API keys
- Advanced Rate Limiting: Configurable per-endpoint request limits
- SSL Encryption: HTTPS with auto-renewing Let's Encrypt certificates
- Input Validation: Phone number and message format validation
- Automated Notifications: Welcome, quota exhausted, and expiry alerts
- Multi threded: Can manage multiple authentications sametime
- Complete Admin Panel: Full CRUD operations for user management
- Usage Analytics: Detailed statistics and user behavior insights
- Health Monitoring: System status and connection testing
- Auto-Updates: GitHub integration for seamless deployments
- Process Management: PM2 for zero-downtime deployments
- Log Aggregation: Centralized logging with real-time monitoring
- Database Management: Firebase Firestore with automatic backups
- Error Handling: Comprehensive error responses and recovery
- ✅ API Key Authentication: Multi-level access control
- ✅ Rate Limiting Protection: Nginx-based request throttling
- ✅ Phone Validation: International format verification
- ✅ OTP Expiration: Time-based code invalidation
- ✅ Message Disguising: Natural conversation patterns
- ✅ HTTPS Encryption: End-to-end secure communication
- ✅ Input Sanitization: Comprehensive data validation
- ✅ CORS Security: Origin-based access restrictions
- Digital Ocean Droplet: Ubuntu 22.04 LTS with 1GB RAM
- Domain Management: DuckDNS with automatic IP updates
- SSL Certificates: Let's Encrypt with Certbot auto-renewal
- Reverse Proxy: Nginx with security headers and rate limiting
- Android Termux: Free SMS gateway using personal Android device
- Tunnel Service: Portmap.io for secure backend-to-phone connectivity
- Message Queue: SQLite-based local storage with cleanup
"Here's what you asked for, forest, Have a nice day."
- ISP Detection Avoidance: Appears as personal conversation
- Word-based Codes: Easy to remember verification words from curated list
- Dynamic Templates: Randomized greeting and closing patterns
- High Delivery Rate: Optimized for carrier acceptance
- User Registration: Secure account verification workflows
- Two-Factor Authentication: Additional security layer for logins
- Password Reset: Secure recovery with phone verification
- Transaction Verification: Financial operation confirmation
- Multi-tenant OTP: Isolated user environments with quota management
- API Integration: RESTful endpoints for easy third-party connectivity
- White-label Solutions: Customizable user experience
- Usage Analytics: Detailed reporting for business insights
- App Verification: Phone number confirmation during registration
- Login Security: Enhanced authentication for sensitive operations
- Notification Backup: SMS fallback when push notifications fail
- Global Reach: International phone number support
- Operating System: Ubuntu 22.04 LTS
- Memory: 1GB RAM minimum (2GB recommended)
- Storage: 25GB SSD with automatic backups
- Network: Static IP with ports 80, 443, 3000 accessible
- Operating System: Android 7.0+ with Termux support
- Storage: 1GB free space for applications and logs
- Network: Stable internet connection for tunnel connectivity
- Permissions: SMS sending and storage access granted
- Firebase Project: Firestore database with service account
- Domain Service: DuckDNS account with API token
- Tunnel Service: Portmap.io account for secure connectivity
- Runtime: Node.js 18.x with Express framework
- Database: Firebase Firestore for user and analytics data
- Authentication: Custom API key system with rate limiting
- Process Management: PM2 with auto-restart and clustering
- Reverse Proxy: Nginx with SSL termination and security headers
- Language: Python 3.8+ with asyncio support
- Local Database: SQLite for OTP storage and message logging
- SMS Integration: Termux-API for Android SMS functionality
- Tunneling: Portmap.io client for secure backend connectivity
- Message Processing: Queue-based with retry logic and cleanup
- Rate Limiting: Nginx zones with configurable burst limits
- SSL/TLS: Let's Encrypt certificates with auto-renewal
- Input Validation: Comprehensive phone and message sanitization
- Error Handling: Structured JSON responses with logging
- Health Monitoring: Automated system checks and alerts
- Kill Switch: Auto-disable program triggered by developer for any user.
- Encoded Code: Unreadable scripts that still run successfully
- OTP Throughput: 1000+ requests per minute sustained
- Concurrent Users: 500+ simultaneous active sessions
- Message Success Rate: 95%+ delivery confirmation
- Response Time: Sub-500ms average API response
- Uptime Target: 99.9% availability with monitoring
- Auto-recovery: Automatic service restart on failures
- Data Persistence: Firebase backup with point-in-time recovery
- Scalability: Horizontal scaling ready with load balancing
- System Health: Server uptime and response times
- Active Users: Current sessions and API usage
- Success Rates: OTP delivery and verification metrics
- Error Tracking: Failed requests with categorization
- Usage Patterns: Daily, weekly, and monthly trends
- User Behavior: Registration and retention analytics
- Performance Trends: Response time and throughput analysis
- Resource Utilization: Server load and capacity planning
- Smart Retry Logic: Exponential backoff for failed deliveries
- Message Optimization: Carrier-specific formatting and timing
- Queue Management: Priority-based processing with overflow handling
- Duplicate Prevention: Request deduplication and idempotency
- User Lifecycle Management: Creation, suspension, and renewal workflows
- Quota Monitoring: Usage tracking with automated alerts
- Bulk Operations: Batch user management and updates
- Audit Logging: Complete action history with timestamps
- RESTful API: Standard HTTP methods with JSON payloads
- Error Standardization: Consistent error codes and messages
- Request Tracing: Unique IDs for end-to-end tracking
- Documentation: OpenAPI specification with examples
- Database Backups: Automated Firebase exports with retention
- Configuration Management: Version-controlled environment settings
- Log Retention: Structured logging with rotation and archival
- Disaster Recovery: Multi-region backup with tested restore procedures
- Access Control: Role-based permissions with API key rotation
- Network Security: Firewall rules and intrusion detection
- Data Protection: Encryption at rest and in transit
- Vulnerability Management: Regular security updates and patching
- Server Provisioning: Digital Ocean droplet with monitoring
- Domain Configuration: DuckDNS with automatic IP updates
- SSL Management: Certbot with automatic certificate renewal
- Process Orchestration: PM2 with startup scripts and health checks
- Device Preparation: Android phone with Termux and API permissions
- Tunnel Establishment: Portmap.io connection with custom subdomain
- Service Management: Background processes with automatic restart
- Connectivity Monitoring: Health checks and failover procedures
- System Metrics: CPU, memory, disk, and network monitoring
- Application Health: API endpoint checks and response validation
- SMS Gateway Status: Connectivity and message delivery tracking
- Alert Configuration: Email and SMS notifications for critical issues
- System Status: Overall health and component availability
- Performance Metrics: Real-time statistics and benchmarks
- Connectivity Tests: Backend-to-SMS gateway validation
- Version Information: Current deployment and feature status
- Log Analysis: Structured error tracking and correlation
- Performance Profiling: Bottleneck identification and optimization
- Connection Diagnostics: End-to-end connectivity verification
- Database Monitoring: Query performance and data integrity checks
This production-grade OTP system delivers enterprise reliability with 99.9% uptime, sub-second response times, and global SMS delivery. Deployed and trusted by businesses worldwide for mission-critical authentication workflows.
Built with modern infrastructure, comprehensive security, and operational excellence in mind - ready for immediate production deployment and long-term scaling.
hide
The msglyAPI website is the official user-facing and admin interface for the Enhanced OTP SMS System, offering a seamless, secure, and fully responsive platform for both casual users and developers.
🌍 Responsive Design: Fully mobile-optimized and desktop-friendly
🧑💻 Developer Access: Instant API key provisioning for registered developers
🛒 Purchase System: Buy SMS/OTP quota using:
Bank Transfer
Cryptocurrency
USD Payments via Coinbase
🔐 Role-Based Access:
User Roles: Standard users with usage control and billing insights
Admin Roles: Full platform control and analytics access
📩 Smart Verification:
Built-in OTP Verification System for login/signup (email & SMS)
Test Simulators: Try out email/SMS verification flows in sandbox mode
📦 Usage Dashboard:
View active quotas, used limits, and SMS delivery reports
Monitor real-time OTP activity and message logs
📁 Payment Management:
See full payment history and status tracking
Admin and users can track purchases, renewals, and billing breakdowns
📊 Analytics:
Time-based usage and performance analytics
Filter by user, date range, or traffic type
Admin-only full-system view for oversight and insights
📢 Notification Center:
Realtime notifications for quota usage, payment confirmation, system alerts
Admin-controlled broadcast and segmented messaging
🤖 AI Features:
AI Chatbot: General assistant for support and FAQs
User Agent Chatbot: Context-aware bot for personalized help and API integration tips
⚙️ Admin Tools:
User Management: Suspend, approve, or monitor users
Payment Review: Verify and confirm manual transfers
Analytics Overview: Holistic platform stats and system load
Termux Server Toggle: Remotely enable/disable SMS gateway access
Log Review & Error Tracking
Manage Chatbots & Notifications
📘 API Documentation: Complete OpenAPI (Swagger) docs available
📥 Private API Key: Issued on registration (developer accounts)
📈 Live Testing: Test endpoints directly in the dashboard with email/SMS simulators
📡 Real-Time Logs: Watch your requests and delivery statuses live
💬 Support Chat: Get real-time help from the chatbot or admin
For full setup instructions, usage examples, and server API integration, check:
- 🔗 OTP Server Repository
- 🔗 msglyAPI Website Repository
- (Sometimes I made it temporarily private due to abuse. If you need access, please contact me directly.)