AuthApiError:Signups not allowed for this instance

[Alex-0981]

When I create a user with supabase.auth.admin.createUser() without setting phone_confirm: true, attempting to log in with supabase.auth.signInWithOtp() fails with:

AuthApiError: Signups not allowed for this instance

But if I create the user with phone_confirm: true, the login works as expected.

Steps to reproduce

1. Call supabase.auth.admin.createUser():

await supabase.auth.admin.createUser({
  phone: '+1234567890',
  // phone_confirm is not set, defaults to false
});

2. Try to log in with:

await supabase.auth.signInWithOtp({
  phone: '+1234567890',
});

3. Error is thrown:

AuthApiError: Signups not allowed for this instance

4. Now create the user with:

await supabase.auth.admin.createUser({
  phone: '+1234567890',
  phone_confirm: true,
});

5. Call signInWithOtp() again — login works.

Environment
• Auth: phone provider enabled
• Instance: phone signups enabled

config.toml

[auth]
enabled = true
# Allow/disallow new user signups to your project.
enable_signup = false

[auth.sms]
# Allow/disallow new user signups via SMS to your project.
enable_signup = true
# If enabled, users need to confirm their phone number before signing in.
enable_confirmations = false
# Template for sending OTP to users
template = "Your code is {{ .Code }}"
# Controls the minimum amount of time that must pass before sending another sms otp.
max_frequency = "5s"

If a user is created via admin.createUser() they should already exist in the system.
So how can I mark the user's phone as confirmed after creation？

[silentworks]

This is because you haven't confirmed their phone and you have signup disabled. The first message sent out when using a magic link for a user who hasn't confirmed their phone number would be a signup one and since signup is disabled the message you are getting is correct.