Skip to main content
GET
Confirm a verification token

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

token
string
required

The vyt confirmation token the user returned with after verifying.

Response

Successful Response

verified
boolean
required

Authoritative result: true only if the verification passed and the confirmation is unlocked. Gate access on this, not on the client-side vyc hint.

external_id
string | null
required

The external_id attached to the session at initialize, if any.

verification
VerificationRef · object
required
id
string | null

The confirmation id for this person's pass through the verification.

status
string | null

Verdict detail: pending, approved, flagged (passed with findings), denied.

reasons
enum<string>[]

Rule findings behind the status. A settled denied or flagged confirmation carries at least one; a clean pass is empty.

  • collision_network / collision_company: this face already holds a confirmation for another, unlinked person, within the network or company scope.
  • identity_mismatch: this face is registered to a different identity (identity lock on).
  • external_identity_mismatch: this external_id is already bound to a different person.
  • duplicate_account: this person already has a confirmation under a different external_id.
  • linked_denial: an account linked to this person was denied.
  • limit_reached: the re-verification limit for this person was hit.
  • face_self_mismatch: the face didn't match the same session's earlier capture.
  • age_blocked: the estimated age failed the configured age gate.
  • geo_blocked: the request came from a blocked region.
  • manual_override: a staff override set this status.
  • guest_declined: the person declined the verification.
Available options:
collision_network,
collision_company,
identity_mismatch,
external_identity_mismatch,
duplicate_account,
linked_denial,
limit_reached,
face_self_mismatch,
age_blocked,
geo_blocked,
manual_override,
guest_declined
confirmed_at
string<date-time> | null

When the latest settled verdict landed.

identity
CollectedIdentityRef · object | null

The identity collected during the flow, present only when the verification's identity config has sharing enabled. Secret-key responses only.