SignOps Verify API
The Verify API from SignOps — 5 operation(s) for verify.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/signops:signops-verify-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: SignOps Verify API
version: 1.0.0
description: 'Push notifications to Android, iOS and the web, login approval on a trusted phone, passkeys, authenticator codes and email OTP, on one API key and your own user ids. Errors are { error: { code, message } }. Test keys (sk_test_) send only to test devices and addresses and are not billed.'
contact:
email: hello@signops.dev
url: https://signops.dev/docs/
termsOfService: https://signops.dev/terms/
servers:
- url: https://api.signops.dev
security:
- secretKey: []
tags:
- name: Verify
paths:
/v1/verify:
post:
operationId: postVerify
summary: Start a verify session (Starter and Pro)
description: Tries passkey, Approve, authenticator, then email, in that order, keeping only the steps the user can do. Valid 10 minutes.
tags:
- Verify
security:
- secretKey: []
parameters:
- name: Idempotency-Key
in: header
required: false
description: The same key within 24 hours returns the first result instead of acting twice.
schema:
type: string
maxLength: 128
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
user_id:
type: string
description: Your own id for the user, up to 128 characters without spaces.
maxLength: 128
context:
type: string
description: Shown on the phone for Approve.
steps:
type: array
items:
type: string
description: Step.
enum:
- passkey
- approve
- totp
- email
description: Leave steps out; the order never changes.
email:
type: string
description: For the email step.
ip:
type: string
description: The user's IP address, for the per-IP limit and risk signals.
user_agent:
type: string
description: For risk signals.
browser:
type: string
description: Shown by Approve.
city:
type: string
description: Shown by Approve.
country:
type: string
description: For risk signals.
device_id:
type: string
description: Your own device id, for new_device.
required:
- user_id
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
4XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
5XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/v1/verify/{id}:
get:
operationId: getVerifyById
summary: Get a verify session
tags:
- Verify
security:
- secretKey: []
parameters:
- name: id
in: path
required: true
schema:
type: string
- name: wait
in: query
required: false
schema:
type: integer
description: Seconds to wait on an Approve step.
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
4XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
5XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/v1/verify/{id}/check:
post:
operationId: postVerifyByIdCheck
summary: Check the current step
tags:
- Verify
security:
- secretKey: []
parameters:
- name: id
in: path
required: true
schema:
type: string
- name: Idempotency-Key
in: header
required: false
description: The same key within 24 hours returns the first result instead of acting twice.
schema:
type: string
maxLength: 128
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
signops_token:
type: string
description: For a passkey step.
code:
type: string
description: For an authenticator or email step.
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
4XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
5XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/v1/verify/{id}/next:
post:
operationId: postVerifyByIdNext
summary: Move to the next step
tags:
- Verify
security:
- secretKey: []
parameters:
- name: id
in: path
required: true
schema:
type: string
- name: Idempotency-Key
in: header
required: false
description: The same key within 24 hours returns the first result instead of acting twice.
schema:
type: string
maxLength: 128
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
reason:
type: string
description: Why, up to 120 characters.
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
4XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
5XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/v1/signals:
post:
operationId: postSignals
summary: Record a sign-in and get its risk signals (Starter and Pro)
description: 'Facts, never a score: first_signin, new_device, new_country, impossible_travel, tor, datacenter. One SignOps cannot know is null.'
tags:
- Verify
security:
- secretKey: []
parameters:
- name: Idempotency-Key
in: header
required: false
description: The same key within 24 hours returns the first result instead of acting twice.
schema:
type: string
maxLength: 128
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
user_id:
type: string
description: Your own id for the user, up to 128 characters without spaces.
maxLength: 128
ip:
type: string
description: The user's IP address, for the per-IP limit and risk signals.
user_agent:
type: string
description: The browser's user agent.
device_id:
type: string
description: Your own device id.
country:
type: string
description: ISO country code.
city:
type: string
description: City.
lat:
type: number
description: Latitude.
lon:
type: number
description: Longitude.
email:
type: string
description: For a new-login alert by email.
required:
- user_id
responses:
'200':
description: OK
content:
application/json:
schema:
type: object
properties:
user_id:
type: string
description: Your own id for the user, up to 128 characters without spaces.
maxLength: 128
signals:
type: object
properties: {}
description: Each signal with its source.
alert:
type: object
properties: {}
description: Whether a new-login alert went, and how.
4XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
5XX:
description: Error
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
components:
schemas:
Error:
type: object
properties:
error:
type: object
properties:
code:
type: string
description: Machine-readable code, like invalid_request, rate_limited or expired.
message:
type: string
description: Written for a developer to read.
required:
- code
- message
required:
- error
securitySchemes:
secretKey:
type: http
scheme: bearer
description: sk_live_... or sk_test_..., on your server only.
publishableKey:
type: http
scheme: bearer
description: pk_live_... or pk_test_..., used by the SDKs in apps and browsers.
externalDocs:
description: Docs
url: https://signops.dev/docs/