THE TWO BROKERS

Identity and delivery, as services.

Two systems we operate as standalone products. CIP handles identity. GSM Gateway handles delivery. Together they're the backbone of every system we ship — and they're available to license, integrate with, or fork.

BROKER 01 · IDENTITY

CIP — Identity broker

secure.omerbilgin.org · OAuth2 + CIP-Pure

Centralized identity service used by our own production platforms. Handles phone, email, Telegram and WhatsApp logins. Validates TC kimlik numarası. Cross-platform identity unification — same person across multiple apps gets one identity, deduplicated.

Auth0 cost, KVKK compliance, multi-platform SSO requirement. Self-hosted, in your jurisdiction.

Maintenance momentum slowed since March 2026. Single point of failure if the instance goes down. We're working on an HA strategy — saying it up front.

Laravel client example

use BilginStudios\CipClient\CipService;

$cip = app(CipService::class);
$user = $cip->loginWithPhone(
    '905XXXXXXX',
    otpCode: '123456'
);

OAuth2 token

curl -X POST https://secure.omerbilgin.org/api/v1/oauth/token \
  -d "client_id=YOUR_CLIENT" \
  -d "client_secret=..." \
  -d "grant_type=password" \
  -d "username=905XXXXXXX" \
  -d "password=..."
56
tables
5+
production clients (live)
4
2FA channels (TOTP/SMS/email/TG)
OAuth2
server (access + refresh)
9
security services
REST + DB
hybrid access model
BROKER 02 · DELIVERY

GSM Gateway — Delivery broker

gsm.omerbilgin.org · 16+ consumer platforms

Unified gateway for SMS (GoIP + VatanSMS), WhatsApp (WAHA + MyWhatsApp Baileys), voice (Asterisk + IVR callback), and TTS (ElevenLabs).

Telecom-level cost per SMS via GoIP (~0.05 TL). Twilio equivalent (~3 TL) — meaningful annual savings.

Multi-session WhatsApp failover: jupiter/default/Matsev pool, automatic switching via resolveWorkingSession().

Send SMS via GSM Gateway

curl -X POST https://gsm.omerbilgin.org/api/v1/sms/send \
  -H "X-API-Key: YOUR_SITE_KEY" \
  -d "to=905XXXXXXX" \
  -d "message=Verification code: 1234"
4
active WAHA sessions
23
WhatsApp bot commands
HMAC-SHA256
signed webhooks
7
webhook event types
IVR
callback completion tracking
per-tenant
API key + site model

Engagement models

We don't publish prices. Three models:

Self-hosted licensing for your own infrastructure → contact for quote

SaaS access on our infrastructure (TR-north-1) → starting at X

Custom integration + integration support → quoted per project

Want to integrate one of these into your stack?

Open project brief →