Skip to main content
GET Secret key. Tokens exchange for 30 minutes. A token from another company or the other test/live partition reads as nonexistent.

​
Path parameter

​
string
required
The vyt from the return URL or the SDK result.

​
Response

​
boolean
Gate on this. true only when approved and not locked.
​
"approved" | "denied"
Approved with reasons is “flagged”.
​
string[]
collision_company, identity_mismatch, external_identity_mismatch, duplicate_account, linked_denial, limit_reached, face_self_mismatch, age_blocked, guest_declined, no_invite, usage_cap_exceeded. Open set; route unknown values to denied.

usage_cap_exceeded doesn’t describe the person: it means your account hit its daily verification limit. Learn more about the limit and how to avoid hitting it.
​
boolean
The person chose not to scan. Denied, but not failed.
​
string | null
The pool the run was judged in, when initialize was called with a group. null otherwise.
​
string[]
Where the reasons came from: the pools whose earlier passes produced them, the run’s own group or one it included. Populated on flagged passes too. Empty when nothing hit.

​
Errors

Denied, declined, and locked are 200 with verified: false. Deprecated and still returned (see the OpenAPI spec): id, confirmed_at, locked, is_test, score, band, external_id, identity.