Bearer token required for all requests.

Authorization: Bearer API_KEY

X-RateLimit-Limit: 120
X-RateLimit-Remaining: 118
X-RateLimit-Reset: 1716980000
        

Prevent duplicate requests using a unique key per request.

POST /verifications
X-Idempotency-Key: 123abc
        

All requests must be signed using HMAC SHA256.

X-Timestamp: 1716980000
X-Signature: HMAC_SHA256(secret, body + timestamp)
        

Subscribe to event-driven verification updates.

POST /webhooks
{
  "url": "https://client.com/webhook",
  "events": ["verification.completed", "verification.failed"]
}
        

Example payload:

{
  "event": "verification.completed",
  "data": {
    "request_id": "vrf_123",
    "decision": "approved"
  }
}