REST API to create and read identity verifications: send a hosted scan link by SMS or email, read overall risk, per-verifier checks, risk scores, scanned documents and the devices seen during the verification. Also offers an encrypted variant where responses are returned under a caller-supplied JWK. Bearer JWT auth.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/trusona-ato-protect-verification-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
openapi: 3.1.0
info:
title: Verification API
description: "API to manage verifications, messages, checkers, devices, and risk\
\ scores."
contact:
name: API Support
url: https://trusona.com
email: support@trusona.com
version: 2.2.0
summary: "Base URL: https://authcloud.trusona.net"
servers:
- url: https://authcloud.trusona.net
security:
- bearerAuth: []
paths:
/api/v1/verifications:
get:
tags:
- Verifications
summary: Get verifications since a specific time or verification ID
description: |-
Retrieve a collection of verifications that have been created or updated since the specified time or verification ID.
The `since` parameter can be either:
- A UUID of a verification (returns verifications created after that verification)
- An ISO 8601 date-time string (e.g., "2022-01-01T00:00:00Z")
- A date string in YYYY-MM-DD format
operationId: getVerifications
parameters:
- name: since
in: query
required: true
schema:
type: string
minLength: 1
- name: until
in: query
required: false
schema:
type: string
- name: count
in: query
required: false
schema:
type: integer
format: int32
default: 1000
- name: page
in: query
required: false
schema:
type: integer
format: int32
default: 0
responses:
"200":
description: List of verifications retrieved successfully
content:
'*/*':
schema:
type: array
items:
$ref: "#/components/schemas/VerificationResponse"
example:
- id: bd30618f-06d3-45c5-ae52-c36751fc20b2
agentEmailAddress: agent@example.com
documentType: US_CA_DL
linkUrl: https://verify.example.com/identity/verifications/BD30618F-06D3-45C5-AE52-C36751FC20B2
linkUrlExpiresAt: 2026-05-05T18:15:00Z
reviewAccessExpiresAt: 2026-05-05T18:30:00Z
createdAt: 2026-05-05T18:00:00Z
updatedAt: 2026-05-05T18:01:05Z
status: SCANNED
closed: true
expiredReviewAccess: true
expiredLinkUrlAccess: true
overallRisk: LOW
workspaceLink: https://portal.example.com/tenant-id/verifications/bd30618f-06d3-45c5-ae52-c36751fc20b2
supportedVerifiers: []
attachments:
- attachmentType: WORKSPACE_CALLBACKS
urls: []
verifierChecks:
- id: 7c19e69d-e4b9-4931-87a4-3a277af6fe72
lastName: SMITH
phoneNumber: "+12025551234"
documentType: US_CA_DL
documentNumberSuffix: "5678"
createdAt: 2026-05-05T18:01:06Z
verifier: MNO_V
verifierResult: SUCCESS
phoneNumberSuffix: "1234"
phoneNumberCountryCode: "1"
matches:
address1: true
address2: null
city: true
country: true
dateOfBirth: true
firstName: true
lastName: true
phoneNumber: true
phoneSim: null
state: true
zipCode: true
externalId: A1.bCDE
- id: 960b7d8a-1c10-4f9d-a2e0-67c68fe688e7
lastName: SMITH
documentType: US_CA_DL
documentNumberSuffix: "5678"
createdAt: 2026-05-05T18:01:09Z
verifier: DMV
verifierResult: SUCCESS
matches:
address1: true
address2: null
city: true
dateOfBirth: true
documentNumber: true
documentType: true
expiryDate: true
eyeColor: true
firstName: true
height: true
issueDate: true
lastName: true
middleInitial: true
middleName: true
sex: true
state: true
weight: true
zip4: null
zipCode: true
messages:
- id: f2aafebd-8d41-4366-9ead-59e04931c3a8
status: DELIVERED
createdAt: 2026-05-05T18:00:00Z
channel: SMS
recipient: "+12025551234"
simSwapped: false
devices:
- id: fb125038-2656-4b51-85ad-6a495876f107
platform: iPhone
language: en-US
browserTimeZone: America/Los_Angeles
origin: null
browserDateTime: Tue May 05 2026 11:00:00 GMT-0700 (Pacific Daylight
Time)
userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS\
\ X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148\
\ Safari/604.1"
operatingSystem: iOS 18.5
browser: Mobile Safari 18.5
displayWidth: 390
displayHeight: 844
browserHeight: 844
browserWidth: 390
ipAddress: 192.0.2.1
ipAddressTimeZone: America/Los_Angeles
country: United States
region: California
city: San Francisco
isp: "Example ISP, Inc."
createdAt: 2026-05-05T18:00:30Z
latitude: 37.7749
longitude: -122.4194
gpsLatitude: null
gpsLongitude: null
via: []
offsetMinutes: 420
epochMilliseconds: 1778000000000
asn: null
dateTime: 5/5/2026 09:53
browserTimeZoneWithOffset: America/Los Angeles (-7)
scanCode: "123"
linkCode: "1920"
scannedDocument: true
blacklistedNetwork: false
whitelistedNetwork: false
truPassUsed: false
fingerprint: abc123def456ghi789jkl012mno345pqr678stu9
turnstileRobot: null
turnstileError: null
riskScores:
- ruleType: DEVICE
id: 0d98bd5f-7e8d-4430-a048-14775c6e57f9
score: "NO"
rule: DEV4D
reason: VPN/Proxy - using iCloud Private Relay
type: DEVICE
riskyFields:
- ipAddress
riskyDevices:
- fb125038-2656-4b51-85ad-6a495876f107
robotRule: true
createdAt: 2026-05-05T18:00:31Z
- ruleType: VERIFIER
id: ad37692c-0e7b-4eeb-a191-f5ce9cd2bb45
score: LOW
rule: VER5A
reason: Between 1% and 20% of DMV data is incorrect
type: VERIFIER
riskyFields:
- issueDate
- expiryDate
verifier: DMV
riskyDevices: []
robotRule: false
createdAt: 2026-05-05T18:01:09Z
billable: true
billableAt: 2026-05-05T18:00:31Z
"400":
description: Bad request - invalid since parameter
"401":
description: Unauthorized
"500":
description: Internal server error
post:
tags:
- Verifications
summary: Create a new verification
operationId: createVerification
requestBody:
content:
application/json:
schema:
$ref: "#/components/schemas/CreateVerificationDto"
required: true
responses:
"201":
description: Verification created successfully
content:
'*/*':
schema:
$ref: "#/components/schemas/VerificationResponse"
example:
id: bd30618f-06d3-45c5-ae52-c36751fc20b2
agentEmailAddress: agent@example.com
documentType: US_CA_DL
linkUrl: https://verify.example.com/identity/verifications/BD30618F-06D3-45C5-AE52-C36751FC20B2
linkUrlExpiresAt: 2026-05-05T18:15:00Z
reviewAccessExpiresAt: 2026-05-05T18:30:00Z
createdAt: 2026-05-05T18:00:00Z
updatedAt: 2026-05-05T18:01:05Z
status: SCANNED
closed: true
expiredReviewAccess: true
expiredLinkUrlAccess: true
overallRisk: LOW
workspaceLink: https://portal.example.com/tenant-id/verifications/bd30618f-06d3-45c5-ae52-c36751fc20b2
supportedVerifiers: []
attachments:
- attachmentType: WORKSPACE_CALLBACKS
urls: []
verifierChecks:
- id: 7c19e69d-e4b9-4931-87a4-3a277af6fe72
lastName: SMITH
phoneNumber: "+12025551234"
documentType: US_CA_DL
documentNumberSuffix: "5678"
createdAt: 2026-05-05T18:01:06Z
verifier: MNO_V
verifierResult: SUCCESS
phoneNumberSuffix: "1234"
phoneNumberCountryCode: "1"
matches:
address1: true
address2: null
city: true
country: true
dateOfBirth: true
firstName: true
lastName: true
phoneNumber: true
phoneSim: null
state: true
zipCode: true
externalId: A1.bCDE
- id: 960b7d8a-1c10-4f9d-a2e0-67c68fe688e7
lastName: SMITH
documentType: US_CA_DL
documentNumberSuffix: "5678"
createdAt: 2026-05-05T18:01:09Z
verifier: DMV
verifierResult: SUCCESS
matches:
address1: true
address2: null
city: true
dateOfBirth: true
documentNumber: true
documentType: true
expiryDate: true
eyeColor: true
firstName: true
height: true
issueDate: true
lastName: true
middleInitial: true
middleName: true
sex: true
state: true
weight: true
zip4: null
zipCode: true
messages:
- id: f2aafebd-8d41-4366-9ead-59e04931c3a8
status: DELIVERED
createdAt: 2026-05-05T18:00:00Z
channel: SMS
recipient: "+12025551234"
simSwapped: false
devices:
- id: fb125038-2656-4b51-85ad-6a495876f107
platform: iPhone
language: en-US
browserTimeZone: America/Los_Angeles
origin: null
browserDateTime: Tue May 05 2026 11:00:00 GMT-0700 (Pacific Daylight
Time)
userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS\
\ X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148\
\ Safari/604.1"
operatingSystem: iOS 18.5
browser: Mobile Safari 18.5
displayWidth: 390
displayHeight: 844
browserHeight: 844
browserWidth: 390
ipAddress: 192.0.2.1
ipAddressTimeZone: America/Los_Angeles
country: United States
region: California
city: San Francisco
isp: "Example ISP, Inc."
createdAt: 2026-05-05T18:00:30Z
latitude: 37.7749
longitude: -122.4194
gpsLatitude: null
gpsLongitude: null
via: []
offsetMinutes: 420
epochMilliseconds: 1778000000000
asn: null
dateTime: 5/5/2026 09:53
browserTimeZoneWithOffset: America/Los Angeles (-7)
scanCode: "123"
linkCode: "1920"
scannedDocument: true
blacklistedNetwork: false
whitelistedNetwork: false
truPassUsed: false
fingerprint: abc123def456ghi789jkl012mno345pqr678stu9
turnstileRobot: null
turnstileError: null
riskScores:
- ruleType: DEVICE
id: 0d98bd5f-7e8d-4430-a048-14775c6e57f9
score: "NO"
rule: DEV4D
reason: VPN/Proxy - using iCloud Private Relay
type: DEVICE
riskyFields:
- ipAddress
riskyDevices:
- fb125038-2656-4b51-85ad-6a495876f107
robotRule: true
createdAt: 2026-05-05T18:00:31Z
- ruleType: VERIFIER
id: ad37692c-0e7b-4eeb-a191-f5ce9cd2bb45
score: LOW
rule: VER5A
reason: Between 1% and 20% of DMV data is incorrect
type: VERIFIER
riskyFields:
- issueDate
- expiryDate
verifier: DMV
riskyDevices: []
robotRule: false
createdAt: 2026-05-05T18:01:09Z
billable: true
billableAt: 2026-05-05T18:00:31Z
"400":
description: Bad request
/api/v1/verifications/{verificationId}/messages:
get:
tags:
- Messages
summary: Get all messages for a verification
operationId: getMessages
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: List of messages
content:
'*/*':
schema:
type: array
items:
$ref: "#/components/schemas/VerificationMessage"
example:
- id: f2aafebd-8d41-4366-9ead-59e04931c3a8
status: DELIVERED
createdAt: 2026-05-05T18:00:00Z
channel: SMS
recipient: "+12025551234"
simSwapped: false
"404":
description: Messages not found
post:
tags:
- Messages
summary: Add a message to a verification
operationId: createMessage
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
requestBody:
content:
application/json:
schema:
oneOf:
- $ref: "#/components/schemas/RequestedMessage"
- $ref: "#/components/schemas/RequestedCopyMessage"
- $ref: "#/components/schemas/RequestedEmailMessage"
- $ref: "#/components/schemas/RequestedSmsMessage"
- $ref: "#/components/schemas/RequestedTrustedSmsMessage"
required: true
responses:
"201":
description: Message added successfully
content:
'*/*':
schema:
$ref: "#/components/schemas/VerificationMessage"
example:
id: f2aafebd-8d41-4366-9ead-59e04931c3a8
status: DELIVERED
createdAt: 2026-05-05T18:00:00Z
channel: SMS
recipient: "+12025551234"
simSwapped: false
"400":
description: Bad request
"404":
description: Not found
"410":
description: Messages can no longer be added to this verification
"422":
description: Sim swap was detected for a TRUSTED_SMS
"429":
description: Quota limit has been reached
/api/v1/encrypted/verifications:
post:
tags:
- Encrypted Verifications
summary: Create a new verification with encrypted response
description: Create a new verification and return the verification data encrypted
with the provided encryption key.
operationId: createEncryptedVerification
requestBody:
content:
application/json:
schema:
$ref: "#/components/schemas/CreateEncryptedVerificationDto"
required: true
responses:
"201":
description: Verification created successfully with encryption token
content:
'*/*':
schema:
$ref: "#/components/schemas/EncryptedVerificationResponse"
"400":
description: "Bad request - Must be one of RSA, EC or OKP (crv=X25519) type\
\ in JWK format"
"401":
description: Unauthorized
"422":
description: Unprocessable entity - validation failed
/api/v1/verifications/{verificationId}:
get:
tags:
- Verifications
summary: Get verification by ID
operationId: getVerification
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: Verification details
content:
'*/*':
schema:
$ref: "#/components/schemas/VerificationResponse"
example:
id: bd30618f-06d3-45c5-ae52-c36751fc20b2
agentEmailAddress: agent@example.com
documentType: US_CA_DL
linkUrl: https://verify.example.com/identity/verifications/BD30618F-06D3-45C5-AE52-C36751FC20B2
linkUrlExpiresAt: 2026-05-05T18:15:00Z
reviewAccessExpiresAt: 2026-05-05T18:30:00Z
createdAt: 2026-05-05T18:00:00Z
updatedAt: 2026-05-05T18:01:05Z
status: SCANNED
closed: true
expiredReviewAccess: true
expiredLinkUrlAccess: true
overallRisk: LOW
workspaceLink: https://portal.example.com/tenant-id/verifications/bd30618f-06d3-45c5-ae52-c36751fc20b2
supportedVerifiers: []
attachments:
- attachmentType: WORKSPACE_CALLBACKS
urls: []
verifierChecks:
- id: 7c19e69d-e4b9-4931-87a4-3a277af6fe72
lastName: SMITH
phoneNumber: "+12025551234"
documentType: US_CA_DL
documentNumberSuffix: "5678"
createdAt: 2026-05-05T18:01:06Z
verifier: MNO_V
verifierResult: SUCCESS
phoneNumberSuffix: "1234"
phoneNumberCountryCode: "1"
matches:
address1: true
address2: null
city: true
country: true
dateOfBirth: true
firstName: true
lastName: true
phoneNumber: true
phoneSim: null
state: true
zipCode: true
externalId: A1.bCDE
- id: 960b7d8a-1c10-4f9d-a2e0-67c68fe688e7
lastName: SMITH
documentType: US_CA_DL
documentNumberSuffix: "5678"
createdAt: 2026-05-05T18:01:09Z
verifier: DMV
verifierResult: SUCCESS
matches:
address1: true
address2: null
city: true
dateOfBirth: true
documentNumber: true
documentType: true
expiryDate: true
eyeColor: true
firstName: true
height: true
issueDate: true
lastName: true
middleInitial: true
middleName: true
sex: true
state: true
weight: true
zip4: null
zipCode: true
messages:
- id: f2aafebd-8d41-4366-9ead-59e04931c3a8
status: DELIVERED
createdAt: 2026-05-05T18:00:00Z
channel: SMS
recipient: "+12025551234"
simSwapped: false
devices:
- id: fb125038-2656-4b51-85ad-6a495876f107
platform: iPhone
language: en-US
browserTimeZone: America/Los_Angeles
origin: null
browserDateTime: Tue May 05 2026 11:00:00 GMT-0700 (Pacific Daylight
Time)
userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS\
\ X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148\
\ Safari/604.1"
operatingSystem: iOS 18.5
browser: Mobile Safari 18.5
displayWidth: 390
displayHeight: 844
browserHeight: 844
browserWidth: 390
ipAddress: 192.0.2.1
ipAddressTimeZone: America/Los_Angeles
country: United States
region: California
city: San Francisco
isp: "Example ISP, Inc."
createdAt: 2026-05-05T18:00:30Z
latitude: 37.7749
longitude: -122.4194
gpsLatitude: null
gpsLongitude: null
via: []
offsetMinutes: 420
epochMilliseconds: 1778000000000
asn: null
dateTime: 5/5/2026 09:53
browserTimeZoneWithOffset: America/Los Angeles (-7)
scanCode: "123"
linkCode: "1920"
scannedDocument: true
blacklistedNetwork: false
whitelistedNetwork: false
truPassUsed: false
fingerprint: abc123def456ghi789jkl012mno345pqr678stu9
turnstileRobot: null
turnstileError: null
riskScores:
- ruleType: DEVICE
id: 0d98bd5f-7e8d-4430-a048-14775c6e57f9
score: "NO"
rule: DEV4D
reason: VPN/Proxy - using iCloud Private Relay
type: DEVICE
riskyFields:
- ipAddress
riskyDevices:
- fb125038-2656-4b51-85ad-6a495876f107
robotRule: true
createdAt: 2026-05-05T18:00:31Z
- ruleType: VERIFIER
id: ad37692c-0e7b-4eeb-a191-f5ce9cd2bb45
score: LOW
rule: VER5A
reason: Between 1% and 20% of DMV data is incorrect
type: VERIFIER
riskyFields:
- issueDate
- expiryDate
verifier: DMV
riskyDevices: []
robotRule: false
createdAt: 2026-05-05T18:01:09Z
billable: true
billableAt: 2026-05-05T18:00:31Z
"404":
description: Verification not found
/api/v1/verifications/{verificationId}/risk_scores:
get:
tags:
- Risk Scores
summary: Get all scores for a verification
operationId: getRiskScores
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: List of risk scores
content:
'*/*':
schema:
type: array
items:
$ref: "#/components/schemas/RiskScore"
example:
- ruleType: DEVICE
id: 0d98bd5f-7e8d-4430-a048-14775c6e57f9
score: "NO"
rule: DEV4D
reason: VPN/Proxy - using iCloud Private Relay
type: DEVICE
riskyFields:
- ipAddress
riskyDevices:
- fb125038-2656-4b51-85ad-6a495876f107
robotRule: true
createdAt: 2026-05-05T18:00:31Z
- ruleType: VERIFIER
id: ad37692c-0e7b-4eeb-a191-f5ce9cd2bb45
score: LOW
rule: VER5A
reason: Between 1% and 20% of DMV data is incorrect
type: VERIFIER
riskyFields:
- issueDate
- expiryDate
verifier: DMV
riskyDevices: []
robotRule: false
createdAt: 2026-05-05T18:01:09Z
"404":
description: Verification not found
/api/v1/verifications/{verificationId}/messages/{verificationMessageId}:
get:
tags:
- Messages
summary: Get a verification's message by ID
operationId: getMessage
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
- name: verificationMessageId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: Message details
content:
'*/*':
schema:
$ref: "#/components/schemas/VerificationMessage"
"404":
description: Verification or message were not found
/api/v1/verifications/{verificationId}/document:
get:
tags:
- Documents
summary: Get the verification's document
description: "Returns the scanned document data in two forms: 'unmasked' with\
\ full PII and 'masked' with sensitive fields partially redacted."
operationId: getDocument
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: The verification's document with masked and unmasked variants.
The unmasked variant contains full PII; the masked variant has sensitive
fields partially redacted.
content:
'*/*':
schema:
type: object
additionalProperties:
$ref: "#/components/schemas/ScanResponse"
example:
UNMASKED:
documentNumber: D12345678
dateOfBirth: 03/15/1990
firstName: JANE
age: "36"
lastName: SMITH
middleName: MARIE
middleInitial: M
issueDate: 06/01/2020
expiryDate: 03/15/2028
documentType: Driver License
sex: Female
eyeColor: Brown
height: "64"
weight: "130"
address1: 123 MAIN ST
address2: null
city: LOS ANGELES
state: CA
zipCode: "90001"
zip4: null
nationality: UNITED STATES OF AMERICA
iso3CountryCode: USA
iso2CountryCode: US
isoCountryName: United States of America
issuingAuthority: null
placeOfBirth: null
verifiedMrz: null
fullAddress: "123 MAIN ST, LOS ANGELES, CA, 90001"
suffix: null
documentCategory: null
documentJurisdiction: null
phoneNumber: null
version: V1
MASKED:
documentNumber: D12*******
dateOfBirth: 03/*******
firstName: JANE
age: '**********'
lastName: SMITH
middleName: MARIE
middleInitial: M
issueDate: 06/*******
expiryDate: 03/*******
documentType: Driver License
sex: '**********'
eyeColor: '**********'
height: '**********'
weight: '**********'
address1: 123*******
address2: null
city: LOS*******
state: C*********
zipCode: 900*******
zip4: null
nationality: UNI*******
iso3CountryCode: U*********
iso2CountryCode: U*********
isoCountryName: United States of America
issuingAuthority: null
placeOfBirth: null
verifiedMrz: null
fullAddress: 123*******
suffix: null
documentCategory: null
documentJurisdiction: null
phoneNumber: null
version: V1
"404":
description: Verification was not found or document is not yet available
"410":
description: Document has been removed (occurs when parent verification
expires)
/api/v1/verifications/{verificationId}/document/scanned_images:
get:
tags:
- Documents
summary: Get the scanned image of the document
operationId: getScannedImages
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: The scanned document image
content:
'*/*':
schema:
type: array
items:
$ref: "#/components/schemas/IdentityImage"
"404":
description: Verification was not found or document does not have an available
scanned image
"410":
description: Scanned image has been removed (occurs when parent verification
expires)
/api/v1/verifications/{verificationId}/devices:
get:
tags:
- Devices
summary: Get all devices for a verification
operationId: getDevices
parameters:
- name: verificationId
in: path
required: true
schema:
type: string
format: uuid
responses:
"200":
description: List of devices
content:
'*/*':
schema:
type: array
items:
$ref: "#/components/schemas/VerificationDevice"
example:
- id: fb125038-2656-4b51-85ad-6a495876f107
platform: iPhone
language: en-US
browserTimeZone: America/Los_Angeles
origin: null
browserDateTime: Tue May 05 2026 11:00:00 GMT-0700 (Pacific Daylight
# --- truncated at 32 KB (66 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/trusona/refs/heads/main/openapi/trusona-verification-api-openapi.yml