Every firm gets the same onboarding: a firm slug, a dashboard password, and an API key. Use the dashboard day-to-day, plug directly into your own backend, or both — nothing here is exclusive.
| Credential | Used as | Purpose |
|---|---|---|
| Firm slug | X-Client-Id header | Identifies which firm a request belongs to |
| API key | X-Api-Key header | Authenticates the request — shown once when generated above, never recoverable after, only re-rotatable |
POST /api/v1/verify
Every submission is automatically tagged to your firm — results show up filtered to only your data in the dashboard.
If part of your flow still wants to hand off to the hosted capture page instead of building your own camera/liveness UI, generate a one-time link with the same credentials — no dashboard login needed:
POST /api/v1/admin/sessions
Redirect your user to the returned url. It's single-use and expires in 24
hours. Your API key never has to touch the customer's browser this way — only the
disposable session token does.