Cognito website screenshot

Cognito

Cognito (cognitohq.com, operated by BlockScore, Inc.) is an identity verification, KYC, and AML compliance API provider that was backed by Y Combinator and Battery Ventures and acquired by Plaid in 2020. Its API turns a phone number, name, or ID document into a verified identity in under a minute, covering 209 countries and thousands of document types. Three developer products sit on one REST API: Identity (phone-first, frictionless verification), Flow (an all-in-one hosted / embeddable verification experience integrated in minutes with document and selfie checks), and Screening (watchlist, sanctions, and politically-exposed-person AML screening with daily re-scans across 20+ lists). The API is JSON:API (application/vnd.api+json), date-versioned via a Cognito-Version header, and authenticated with HTTP request signatures (HMAC-SHA256 over a digest of the body). It ships a sandbox host, signed webhooks, and client SDKs for seven languages.

Cognito publishes 1 API on the APIs.io network. Tagged areas include Company, Identity, Identity Verification, KYC, and AML.

The Cognito catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Cognito’s developer surface includes documentation, API reference, getting-started guide, engineering blog, pricing, signup flow, changelog, and 20 more developer resources.

41.9/100 thin ▬ flat Agent 35/100 agent aware Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
1 APIs 1 MCP Servers
CompanyIdentityIdentity VerificationKYCAMLComplianceFraud PreventionOnboardingWatchlist ScreeningKnow Your Customer

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 41.9/100 · thin
Contract Quality 5.7 / 25
Developer Ergonomics 12.6 / 20
Commercial Clarity 6.8 / 20
Operational Transparency 7.5 / 13
Governance 0.0 / 12
Discoverability 9.3 / 10
Agent readiness — 35/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/cognito: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Cognito Identity Verification API

REST API for identity verification, KYC, and AML watchlist/PEP screening. JSON:API media type (application/vnd.api+json), date-based versioning via the Cognito-Version header, a...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

cognito-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Cognito Authentication

httpSignature · 1 scheme

SECURITY

Cognito Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Cognito Vulnerability Disclosure

Hackerone · contact published

SECURITY

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Scroll for all 7

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 4

Authentication, authorization, and security posture

Operate 4

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 1

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: cognito
name: Cognito
description: 'Cognito (cognitohq.com, operated by BlockScore, Inc.) is an identity verification, KYC, and AML compliance API
  provider that was backed by Y Combinator and Battery Ventures and acquired by Plaid in 2020. Its API turns a phone number,
  name, or ID document into a verified identity in under a minute, covering 209 countries and thousands of document types.
  Three developer products sit on one REST API: Identity (phone-first, frictionless verification), Flow (an all-in-one hosted
  / embeddable verification experience integrated in minutes with document and selfie checks), and Screening (watchlist, sanctions,
  and politically-exposed-person AML screening with daily re-scans across 20+ lists). The API is JSON:API (application/vnd.api+json),
  date-versioned via a Cognito-Version header, and authenticated with HTTP request signatures (HMAC-SHA256 over a digest of
  the body). It ships a sandbox host, signed webhooks, and client SDKs for seven languages.'
url: https://raw.githubusercontent.com/api-evangelist/cognito/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://cognitohq.com/wp-content/themes/cognito/images/cognito-share.jpg
x-type: company
x-source: vc-portfolio
x-backed-by:
- battery-ventures
- y-combinator
x-tier: stub
x-tier-reason: portfolio-lead
x-acquired-by: plaid
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Identity
- Identity Verification
- KYC
- AML
- Compliance
- Fraud Prevention
- Onboarding
- Watchlist Screening
- Know Your Customer
apis:
- name: Cognito Identity Verification API
  description: 'REST API for identity verification, KYC, and AML watchlist/PEP screening. JSON:API media type (application/vnd.api+json),
    date-based versioning via the Cognito-Version header, and HTTP request-signature authentication (HMAC-SHA256). Core resources:
    profiles, identity_searches (and async search jobs), plus Flow sessions and Screening searches.'
  humanURL: https://cognitohq.com/docs
  baseURL: https://api.cognitohq.com
  tags:
  - Identity Verification
  - KYC
  - AML
  properties:
  - type: APIReference
    url: https://cognitohq.com/docs/reference
  - type: GettingStarted
    url: https://cognitohq.com/docs/identity/id-verification-api-quickstart
  - type: Authentication
    url: authentication/cognito-authentication.yml
  - type: Webhooks
    url: asyncapi/cognito-flow-webhooks.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DeveloperPortal
  url: https://cognitohq.com/docs
- type: Documentation
  url: https://cognitohq.com/docs
- type: APIReference
  url: https://cognitohq.com/docs/reference
- type: GettingStarted
  url: https://cognitohq.com/docs/identity/id-verification-api-quickstart
- type: Blog
  url: https://cognitohq.com/blog
- type: Pricing
  url: https://plaid.com/pricing/
- type: SignUp
  url: https://dashboard.plaid.com/signup/
- type: PrivacyPolicy
  url: https://cognitohq.com/privacy-statement
- type: StatusPage
  url: https://status.cognitohq.com/
- type: ChangeLog
  url: https://cognitohq.com/docs/guides/api-changelog
- type: Deprecation
  url: https://cognitohq.com/docs/guides/breaking-changes
- type: Webhooks
  url: asyncapi/cognito-flow-webhooks.yml
- type: Authentication
  url: authentication/cognito-authentication.yml
- type: Conventions
  url: conventions/cognito-conventions.yml
- type: Conformance
  url: conformance/cognito-conformance.yml
- type: Lifecycle
  url: lifecycle/cognito-lifecycle.yml
- type: ChangeLog
  name: Cognito changelog (artifact)
  url: changelog/cognito-changelog.yml
- type: Packages
  url: packages/cognito-packages.yml
- type: Sandbox
  url: sandbox/cognito-sandbox.yml
- type: ErrorCatalog
  url: errors/cognito-problem-types.yml
- type: VulnerabilityDisclosure
  url: security/cognito-vulnerability-disclosure.yml
- type: Security
  url: https://cognitohq.com/docs/guides/security
- type: DomainSecurity
  url: security/cognito-domain-security.yml
- type: MCPServer
  url: mcp/cognito-mcp.yml
- type: LLMsTxt
  url: llms/cognito-llms.txt
- type: Components
  url: components/cognito-components.yml
- type: DataModel
  url: data-model/cognito-data-model.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence