Confirm a verification token
Exchange the vyt token the user returned with for the authoritative verification result. Secret key only. Call this from your backend before granting access.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The vyt confirmation token the user returned with after verifying.
Response
Successful Response
Authoritative result: true only if the verification passed and the confirmation is unlocked. Gate access on this, not on the client-side vyc hint.
The external_id attached to the session at initialize, if any.
The confirmation id for this person's pass through the verification.
Verdict detail: pending, approved, flagged (passed with findings), denied.
Rule findings behind the status. A settled denied or flagged confirmation carries at least one; a clean pass is empty.
- collision_network / collision_company: this face already holds a confirmation for another, unlinked person, within the network or company scope.
- identity_mismatch: this face is registered to a different identity (identity lock on).
- external_identity_mismatch: this external_id is already bound to a different person.
- duplicate_account: this person already has a confirmation under a different external_id.
- linked_denial: an account linked to this person was denied.
- limit_reached: the re-verification limit for this person was hit.
- face_self_mismatch: the face didn't match the same session's earlier capture.
- age_blocked: the estimated age failed the configured age gate.
- geo_blocked: the request came from a blocked region.
- manual_override: a staff override set this status.
- guest_declined: the person declined the verification.
collision_network, collision_company, identity_mismatch, external_identity_mismatch, duplicate_account, linked_denial, limit_reached, face_self_mismatch, age_blocked, geo_blocked, manual_override, guest_declined When the latest settled verdict landed.
The identity collected during the flow, present only when the verification's identity config has sharing enabled. Secret-key responses only.