Immutable

Immutable passport profile API

Passport Profile endpoints

Documentation GitHub OpenAPI

Operations 6

POST /passport-profile/v1/phone-otp/verify Verify phone OTP code against user phone number #

GET /passport-profile/v1/profile Get profile for authenticated user #

POST /passport-profile/v1/username Update username #

POST /passport-profile/v1/phone-otp Send phone OTP code for user supplied phone number #

POST /passport-profile/v2/linked-wallets Link wallet v2 #

GET /passport-profile/v1/user/info Get all info for a Passport user #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/immutable:immutable-passport-profile-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Immutable zkEVM passport profile API
  version: 1.0.0
  description: Immutable Multi Rollup API
  contact:
    name: Immutable API Support
    email: support@immutable.com
    url: https://support.immutable.com
servers:
- url: https://api.sandbox.immutable.com
tags:
- name: passport profile
  description: Passport Profile endpoints
  x-displayName: passport profile
paths:
  /passport-profile/v1/phone-otp/verify:
    post:
      x-public: true
      security:
      - BearerAuth:
        - openid
      tags:
      - passport profile
      summary: Verify phone OTP code against user phone number
      description: Verify phone OTP code for user supplied phone number
      operationId: verify-phone-otp
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PhoneNumberOTPVerificationRequest'
      responses:
        '200':
          description: OK
        '400':
          description: BadRequestError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError400'
        '429':
          description: TooManyRequestsError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError429'
        '500':
          description: InternalServerError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError500'
  /passport-profile/v1/profile:
    get:
      x-public: true
      security:
      - BearerAuth:
        - openid
      tags:
      - passport profile
      summary: Get profile for authenticated user
      description: Get profile for the authenticated user's Passport wallet
      operationId: get-profile-by-authenticated-wallet
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProfileResponse'
        '401':
          description: UnauthorizedError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError401'
        '429':
          description: TooManyRequestsError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError429'
        '500':
          description: InternalServerError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError500'
  /passport-profile/v1/username:
    post:
      x-public: true
      security:
      - BearerAuth:
        - openid
      tags:
      - passport profile
      summary: Update username
      description: Update username for the authenticated user's Passport wallet
      operationId: update-username
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UsernameUpdateRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UsernameUpdateResponse'
        '400':
          description: BadRequestError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError400'
        '401':
          description: UnauthorizedError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError401'
        '403':
          description: ForbiddenError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError403'
        '500':
          description: InternalServerError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError500'
  /passport-profile/v1/phone-otp:
    post:
      x-public: true
      security:
      - BearerAuth:
        - openid
      tags:
      - passport profile
      summary: Send phone OTP code for user supplied phone number
      operationId: send-phone-otp
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PhoneNumberOTPRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PhoneNumberOTPResponse'
        '400':
          description: BadRequestError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError400'
        '401':
          description: UnauthorizedError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError401'
        '403':
          description: ForbiddenError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError403'
        '429':
          description: BadRequestError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError429'
        '500':
          description: InternalServerError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError500'
  /passport-profile/v2/linked-wallets:
    post:
      x-public: true
      security:
      - BearerAuth:
        - openid
      tags:
      - passport profile
      summary: Link wallet v2
      description: Link an external EOA wallet to an Immutable Passport account by providing an EIP-712 signature.
      operationId: link-wallet-v2
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/LinkWalletV2Request'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Wallet'
        '400':
          description: BadRequestError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError400'
        '401':
          description: UnauthorizedError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError401'
        '403':
          description: ForbiddenError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError403'
        '500':
          description: InternalServerError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError500'
  /passport-profile/v1/user/info:
    get:
      x-public: true
      summary: Get all info for a Passport user
      description: Get all the info for an authenticated Passport user
      tags:
      - passport profile
      operationId: getUserInfo
      security:
      - BearerAuth:
        - openid
      responses:
        '200':
          description: Passport user's info
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserInfo'
        '401':
          description: UnauthorizedError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError401'
        '500':
          description: InternalServerError
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIError500'
        default:
          description: unexpected error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BasicAPIError'
components:
  schemas:
    WalletType:
      description: Wallet type
      type: string
      example: MetaMask
    Wallet:
      description: Linked wallet
      type: object
      required:
      - address
      - type
      - created_at
      - updated_at
      - clientName
      properties:
        address:
          $ref: '#/components/schemas/EthAddress'
        type:
          $ref: '#/components/schemas/WalletType'
        created_at:
          $ref: '#/components/schemas/CreatedAt'
        updated_at:
          $ref: '#/components/schemas/CreatedAt'
        name:
          $ref: '#/components/schemas/Name'
        clientName:
          type: string
          description: Name of client that linked the wallet
          example: Passport Dashboard
    PhoneNumber:
      description: Phone number
      type: string
      example: '+61412345678'
      minLength: 3
      maxLength: 50
    UsernameUpdateResponse:
      description: Username update response
      type: object
      properties:
        username:
          type: string
      required:
      - username
    APIError429:
      allOf:
      - $ref: '#/components/schemas/BasicAPIError'
      - type: object
        properties:
          code:
            type: string
            description: Error Code
            enum:
            - TOO_MANY_REQUESTS_ERROR
            example: TOO_MANY_REQUESTS_ERROR
          details:
            type:
            - object
            - 'null'
            description: Additional details to help resolve the error
        required:
        - code
        - details
    LinkWalletV2Request:
      description: Link wallet V2 request
      type: object
      required:
      - type
      - wallet_address
      - signature
      - nonce
      properties:
        type:
          type: string
          description: This should be the EIP-6963 rdns value, if you're unable to get the rdns value you can provide "External". If using WalletConnect then provide "WalletConnect".
          example: io.metamask
          maxLength: 32
          not:
            enum:
            - Passport
            - com.immutable.passport
        wallet_address:
          description: The address of the external wallet being linked to Passport
          type: string
          example: '0xd8da6bf26964af9d7eed9e03e53415d37aa96045'
          pattern: ^0x[a-fA-F0-9]{40}$
        signature:
          description: The EIP-712 signature
          type: string
        nonce:
          description: A unique identifier for the signature
          type: string
    EthAddress:
      description: Ethereum address
      type: string
      example: '0xd8da6bf26964af9d7eed9e03e53415d37aa96045'
    PhoneNumberOTPResponse:
      description: Phone number OTP request
      type: object
      required:
      - phone_number
      properties:
        phone_number:
          $ref: '#/components/schemas/PhoneNumber'
    BasicAPIError:
      type: object
      properties:
        message:
          type: string
          description: Error Message
          maxLength: 1024
          pattern: ^[\x20-\x7E]*$
          example: all fields must be provided
        link:
          type: string
          format: uri
          description: Link to IMX documentation that can help resolve this error
          maxLength: 2048
          example: https://docs.x.immutable.com/reference/#/
        trace_id:
          type: string
          description: Trace ID of the initial request
          maxLength: 64
          pattern: ^[a-zA-Z0-9_-]+$
          example: e47634b79a5cd6894ddc9639ec4aad26
      required:
      - message
      - link
      - trace_id
    APIError401:
      allOf:
      - $ref: '#/components/schemas/BasicAPIError'
      - type: object
        properties:
          code:
            type: string
            description: Error Code
            enum:
            - UNAUTHORISED_REQUEST
            example: UNAUTHORISED_REQUEST
          details:
            type:
            - object
            - 'null'
            description: Additional details to help resolve the error
        required:
        - code
        - details
    APIError400:
      allOf:
      - $ref: '#/components/schemas/BasicAPIError'
      - type: object
        properties:
          code:
            type: string
            description: Error Code
            enum:
            - VALIDATION_ERROR
            example: VALIDATION_ERROR
          details:
            type:
            - object
            - 'null'
            description: Additional details to help resolve the error
        required:
        - code
        - details
    PhoneNumberOTPVerificationRequest:
      description: Phone number OTP verification request
      type: object
      required:
      - phone_number
      - code
      properties:
        phone_number:
          $ref: '#/components/schemas/PhoneNumber'
        code:
          $ref: '#/components/schemas/PhoneNumberOTP'
    APIError500:
      allOf:
      - $ref: '#/components/schemas/BasicAPIError'
      - type: object
        properties:
          code:
            type: string
            description: Error Code
            enum:
            - INTERNAL_SERVER_ERROR
            example: INTERNAL_SERVER_ERROR
          details:
            type:
            - object
            - 'null'
            description: Additional details to help resolve the error
        required:
        - code
        - details
    UserInfo:
      type: object
      required:
      - sub
      - linked_addresses
      properties:
        sub:
          type: string
          description: The user's id
        email:
          type: string
          description: The user's email address
        passport_address:
          type: string
          description: The user's Passport address if it has been registered
          pattern: ^0x[0-9a-fA-F]*$
          maxLength: 42
        linked_addresses:
          type: array
          minItems: 0
          description: The user's list of linked addresses
          items:
            description: The user's linked address
            type: string
            pattern: ^0x[0-9a-fA-F]*$
            maxLength: 42
    PhoneNumberOTP:
      description: Phone number verification OTP
      type: string
      example: '123456'
      maxLength: 6
      minLength: 6
    ProfileResponse:
      description: Get profile by wallet response
      type: object
      properties:
        username:
          type: string
      required:
      - username
    PhoneNumberOTPRequest:
      description: Phone number OTP request
      type: object
      required:
      - phone_number
      properties:
        phone_number:
          $ref: '#/components/schemas/PhoneNumber'
        channel:
          enum:
          - sms
          - whatsapp
          type: string
          example: sms
    Name:
      description: Name
      type: string
      example: Test
    CreatedAt:
      description: Created at
      type: string
      format: date-time
      example: '2021-08-31T00:00:00Z'
    UsernameUpdateRequest:
      description: Request to update username
      type: object
      required:
      - username
      properties:
        username:
          type: string
          description: The new username
          minLength: 3
          maxLength: 18
          pattern: ^[a-zA-Z0-9]+$
    APIError403:
      allOf:
      - $ref: '#/components/schemas/BasicAPIError'
      - type: object
        properties:
          code:
            type: string
            description: Error Code
            enum:
            - AUTHENTICATION_ERROR
            example: AUTHENTICATION_ERROR
          details:
            type:
            - object
            - 'null'
            description: Additional details to help resolve the error
        required:
        - code
        - details
  securitySchemes:
    BearerAuthWithClient:
      type: http
      scheme: bearer
      bearerFormat: JWT
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
    ImmutableApiKey:
      x-go-name: ImmutableApiKey
      type: apiKey
      in: header
      name: x-immutable-api-key
    OktaBearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
x-provenance:
  method: harvested
  publisher: Immutable
  source: https://imx-openapiv3-mr-sandbox.s3.us-east-2.amazonaws.com/openapi.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)