Developer API

Scale verification without sacrificing privacy.

Integrate predictable, versioned JSON endpoints for organization requests and authenticated mobile verification flows.

Environment

Test safely, then go live.

Organization keys are explicitly scoped to test or live mode. Rotating one environment never changes the other.

Test
sk_test_••••••••••••
Live
sk_live_••••••••••••

Authentication

Use the right credential.

Organization request creation uses `X-API-KEY`. Mobile user flows use `Authorization: Bearer TOKEN`. The two are intentionally never interchangeable.

Never place live keys or bearer tokens in client code, shared examples, or source control.

Verification lifecycle

One request, clear states, scoped credentials.

The API handles request creation, user consent, event delivery, and completion without blurring authentication boundaries.

1. Request

Create a verification with an organization API key, target email, address, and duration.

2. Consent

The authenticated user retrieves the request and explicitly accepts or rejects it.

3. Events

A verification-scoped tracking token authorizes idempotent geofence events.

4. Result

The organization reviews a stable verification outcome and audit summary.

Simple integration

Predictable requests and response envelopes.

Every API response returns a `data` object and an `error` field, giving clients one stable parsing strategy across success and failure cases.

  • Versioned paths under `/api/v1`
  • Explicit status codes and error codes
  • Raw bearer tokens returned only once
POST /api/v1/verifications
X-API-KEY: sk_test_...
Content-Type: application/json
{
  "email": "person@example.com",
  "address": "10 Market Street",
  "tracking_days": 2
}
201 Created

API guarantees

Security behavior clients can depend on.

30-day user tokens

Bearer tokens expire after 30 days and can be revoked without affecting unrelated sessions.

Rate-limited login

Generic authentication errors and request throttling reduce account enumeration and abuse.

Idempotent device events

Verification-scoped identifiers make retries safe when mobile connectivity is unreliable.

Build trust by design

Ready to build?

Request test credentials and discuss the right integration path for your verification workflow.