Skip to main content
POST
cURL

Headers

Authorization
string
required

Bearer token. Format: Bearer <api_key>

Idempotency-Key
string

Unique key per logical operation. UUID v4 recommended. Max 255 characters.

Response

The request has succeeded.

Session credentials for handing off to the provider-hosted (Sumsub) verification flow. Returned by POST /v1/organizations/verification.

object
enum<string>
required

Object type. Always verification_session.

Available options:
verification_session
url
string
required

Customer-facing URL that hosts the full verification flow on the provider's site. Share this with the applicant by email, redirect, or in-app link.

accessToken
string
required

Short-lived (~30 min) access token. Pass to the Sumsub WebSDK if you'd rather embed the flow in your own UI. Refresh by calling POST /v1/organizations/verification again for the same org.