Skip to main content
POST
Create Verification Session
Creates a hosted verification session for the associated person and returns a link to share with them (by email or redirect). The person opens the hosted page and uploads their identity documents and completes the liveness (biometric) check there; identity documents for an individual are not uploaded through this API. Hosted capture should accept passports for all countries, and Singapore NRIC for Singapore individuals. If an active (non-expired, non-terminal) session already exists, that session is returned instead of creating a new one, so the call is safe to repeat. There is no request body. Fails with 422 when the account’s kyc_status is terminal, or when the person is already approved. A rejected person may be re-verified: calling this endpoint mints a fresh session and moves their verification_status back to under_review. Identity verification of the person completes once they finish document capture and the liveness check inside the session and its status is passed; progress surfaces through the person’s verification_status, the account-level requirements block, and the account.updated webhook.

Path Parameters

string
required
Id of the Platform customer.
string
required
Id of the parent account.
string
required
Id of the associated person (e.g. aap_…).

Response

Returns 200 with the verification-session object. status is one of pending, passed, failed, expired.
Treat hosted_url as an opaque, short-lived link — the hosting domain may change and the URL must not be stored long-term or embedded in an iframe.
string
Always "verification_session".
string
Id of the verification session.
string
Id of the associated person the session verifies (e.g. aap_…).
enum
One of pending, passed, failed, expired.
string
Link to the hosted verification page to share with the person. Opaque and short-lived — do not store long-term or embed in an iframe.
string
ISO 8601 timestamp when the session expires.
string
ISO 8601 timestamp when created.
string | null
ISO 8601 timestamp when last updated.
string
Id of the API key that created the session.
string | null
Id of the API key that last updated the session.