The best way to integrate
identity and fraud.

Five steps from signup to first verdict.

• Create your account at business.didit.me, or call POST https://apx.didit.me/auth/v2/programmatic/register/.
• Build a workflow in the Business Console, or call POST /v3/workflows/.
• Register a webhook destination via the console, or call POST /v3/webhook/destinations/ (Didit returns the signing secret in the response).
• Create a session with POST /v3/session/, passing workflow_id and vendor_data (your user identifier). Redirect the user to the returned URL, or drop in a native Software Development Kit (SDK) on the same /v3/ contract.
• Receive the verdict on the signed webhook, or poll GET /v3/session/:session_id/decision/.

One /v3/ Application Programming Interface (API) covers Know Your Customer (KYC), Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). 500 verifications free every month, forever, no credit card.

Yes, under sixty seconds, no credit card. Sign up at business.didit.me (or register programmatically with POST https://apx.didit.me/auth/v2/programmatic/register/) and you land in a sandbox workspace with a real Application Programming Interface (API) key.

• Same shape as production, deterministic decisions, every module unlocked.
• Real /v3/ endpoints, real webhooks, real document samples.
• Switch to live whenever you are ready, same keys, same Uniform Resource Locators (URLs), same contract.

Five first-party SDKs, all open-source, all on public docs:

• Web, JavaScript / TypeScript, framework-agnostic, iframe embed or hosted-flow redirect.
• iOS, Swift, distributed as XCFramework.
• Android, Kotlin, via Maven Central.
• React Native, TypeScript bindings on top of native modules (TurboModules).
• Flutter, Dart wrapper around the same native SDKs.

Every SDK calls the same /v3/ contract under the hood, so you can mix and match, Web on your site, native on mobile. Reference at docs.didit.me/integration/web-sdks/overview.

Register one destination; Didit signs every delivery.

• Configure your endpoint via the Business Console, or call POST /v3/webhook/destinations/ with label, url, and subscribed_events.
• Didit returns a secret_shared_key in the response. Use it to verify the Hash-based Message Authentication Code (HMAC)-SHA256 signature on every incoming webhook (header: X-Signature-V2).
• Each payload carries an exact, case-sensitive status, "Approved", "Declined", "In Review", "Resubmitted", and more. Full state machine at docs.didit.me/integration/verification-statuses.
• Retries use exponential backoff until you return 2xx; every delivery is logged and replayable on demand from the console.

Full reference at docs.didit.me/integration/webhooks.

Generous defaults on every plan, tuned upward per account.

• Free tier, sandbox plus 500 production checks every month, forever.
• Pay-per-usage, burst limits scale automatically with sustained volume. You will not hit a wall mid-launch.
• Enterprise, custom rate limits, dedicated capacity, and uptime commitments in the Master Services Agreement (MSA). Talk to us at support@didit.me.

Target capacity per region at status.didit.me. 100% real uptime over the last 6 months across millions of verifications a month.

Yes, paste one prompt and ship. Drop the canonical integration prompt at docs.didit.me/integration/integration-prompt into Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the workflow, wires the webhook, and runs a smoke test end-to-end.

Agent-initiated sessions pay the same public price as direct API calls, $0.33 per full Know Your Customer (KYC), $0.15 per standalone Identity Document Verification, $0.15 per wallet screen. Free, no extra setup, works with any Model Context Protocol (MCP)-aware client.

Monthly release notes at `docs.didit.me/changelog`, every shipped module, every webhook event added, every breaking change called out.

• The OpenAPI 3.1 specification at docs.didit.me/openapi-25.json is versioned alongside the docs. Import it into Postman or generate clients in any language.
• Versioning is additive by default. New fields, new optional parameters, and new webhook events ship without a version bump. Breaking changes get a new /v4/ namespace and a published deprecation window.
• We never silently change a field's meaning, if a verdict shape, signature scheme, or status enum changes, it ships behind a header and is announced before cut-over.

`status.didit.me` publishes real-time uptime and incident history per region, verification, webhooks, console, docs. No login required.

• Subscribe via Really Simple Syndication (RSS), email, or webhook for outage alerts.
• Track record: 100% real uptime over the last 6 months; 99.99% availability target in the Service Level Agreement (SLA).
• Every incident gets a public post-mortem on the same page.
• Enterprise contracts add a named on-call engineer, a dedicated Slack or Microsoft Teams shared channel, and incident-severity Service Level Objectives in the Master Services Agreement (MSA).