查找所有模块、端点和 Webhook。


全球2,000多家组织信赖。
五分钟内完成验证。
创建您的 Didit 账户。
- 在业务控制台: 在
business.didit.me注册,不到 60 秒, 无需银行卡,无销售门槛。 - 通过 Application Programming Interface (API): 调用
POST https://apx.didit.me/auth/v2/programmatic/register/,然后调用POST .../verify-email/。
无论哪种方式,您都将获得一个沙盒 API 密钥, 与生产环境相同,所有模块均已解锁。
即时签发, 无需银行卡、合同或电话。
- 无最低消费
- 无合同
- 每月 500 次免费
- 开放沙盒
选择模块。组合工作流。
- 在业务控制台: 将模块拖放到工作流构建器中, 包括身份文档验证、被动活体检测、人脸匹配、反洗钱 (AML)、钱包筛选、Internet Protocol (IP) 分析以及其他 19 个模块。
- 通过 API: 调用
verification.didit.me上的POST /v3/workflows/,并附带您需要的模块。
无论哪种方式,都将返回一个 workflow_id,您将在每个会话中传递该 ID。
- ID Verification
- Passive Liveness
- Face Match 1:1
- AML Screening
- Device & IP Analysis
- 地址证明
- NFC 读取
- 电话验证
- 钱包筛选
- 自定义问卷
为每个判决配置一个 webhook 目的地。
- 在业务控制台: 添加您的 webhook Uniform Resource Locator (URL),选择事件,并复制 Didit 生成的签名密钥。
- 通过 API: 调用
POST /v3/webhook/destinations/,并附带label、url和subscribed_events。响应将返回 Didit 用于签署每次交付的secret_shared_key。
- POST/v3/session/38ms201
- GET/v3/session/{id}/decision/24ms200
- PATCH/v3/session/{id}/update-status/31ms200
- GET/v3/session/{id}/generate-pdf52ms200
- POST/v3/lists/{id}/entries/face-upload/44ms201
- POST/v3/transactions/29ms201
所有端点开放 · 每个 webhook 均经 HMAC 签名。
创建会话, 通过软件开发工具包 (SDK) 或直接 API。
- 使用 Software Development Kit (SDK): 嵌入适用于 Web、iOS、Android、React Native 或 Flutter 的原生 SDK, 底层采用相同的
/v3/契约。 - 通过 API: 调用
POST /v3/session/,并附带workflow_id和vendor_data值(您的用户标识符)。
响应将为您提供一个验证 URL,用于重定向或嵌入到您的应用中。
$ curl -X POST /v3/session/ \
-H "x-api-key: $DIDIT_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"workflow_id": "3daf4c64-...",
"vendor_data": "u_42",
"callback": "https://acme.com/webhook"
}'监听 webhook, 或轮询。
- 实时 Webhook: 您的端点会在每次状态更改时触发。读取
status("Approved"、"Declined"、"In Review"、"Resubmitted"等),更新您的数据库,然后部署。 - 通过轮询: 调用
GET /v3/session/:session_id/decision/以获取相同的负载, 当您的技术栈无法接受入站流量时非常有用。
状态字符串精确且区分大小写。完整的状态机请参见 docs.didit.me/integration/verification-statuses。
- evt_9c2session.verified2.4s ago200 OK
- evt_9c1session.review_started12s ago200 OK
- evt_9c0session.aml_hit1m ago200 OK
- evt_9bfsession.declined3m ago200 OK
所有界面公开。零销售电话。
一个 curl 命令。五个 SDK。
$ curl -X POST /v3/session/ \
-H "x-api-key: $DIDIT_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"workflow_id": "3daf4c64-...",
"vendor_data": "u_42",
"callback": "https://acme.com/webhook"
}'一个 API 搞定身份和欺诈。
通过单个提示集成。
任意流程。任意国家。任意用例。
即时签发, 无需银行卡、合同或电话。
- 无最低消费
- 无合同
- 每月 500 次免费
- 开放沙盒
按使用量付费。就是这么简单。
- ID Verification$0.15
- Passive Liveness$0.10
- Face Match 1:1$0.05
- AML Screening$0.20
- Device & IP Analysis$0.03
- 钱包筛选 (KYT)$0.15
每月 500 次免费 · 无最低消费 · 无年度合同。
开放API。在此基础上构建。
- POST/v3/session/38ms201
- GET/v3/session/{id}/decision/24ms200
- PATCH/v3/session/{id}/update-status/31ms200
- GET/v3/session/{id}/generate-pdf52ms200
- POST/v3/lists/{id}/entries/face-upload/44ms201
- POST/v3/transactions/29ms201
所有端点开放 · 每个 webhook 均经 HMAC 签名。
适用于所有平台的SDK。
市场上最快的验证。
- p500.00s
- p950.00s
- p990.00s
市场最快验证 · iPhone、Android、桌面、平板、5G 或 2G。
免费开始。按使用量付费。可扩展至企业级。
免费
每月 $0。无需信用卡。
- 免费 KYC 套件(身份验证 + 被动活体检测 + 人脸匹配 + 设备与 IP 分析), 每月 500 次,永久有效
- 黑名单用户
- 重复检测
- 每次会话 200+ 欺诈信号
- Didit 网络中可重复使用的 KYC
- 案件管理平台
- 工作流构建器
- 公开文档、沙盒、SDK、MCP(模型上下文协议)服务器
- 社区支持
按用量计费
按实际用量付费。25+模块。公开的模块定价,无每月最低费用。
- 完整KYC $0.33(身份+生物识别+IP/设备)
- 10,000+ AML数据集, 制裁、PEP、负面媒体
- 1,000+ 政府数据源用于数据库验证
- 交易监控 $0.02/笔交易
- 实时KYB $2.00/家企业
- 钱包筛选 $0.15/次检查
- 白标验证流程, 您的品牌,我们的基础设施
企业版
定制MSA和SLA。适用于大批量和受监管项目。
- 年度合同
- 定制MSA、DPA和SLA
- 专属Slack和WhatsApp频道
- 按需人工审核员
- 经销商和白标条款
- 独家功能和合作伙伴集成
- 指定CSM、安全审查、合规支持
免费开始 → 仅在检查运行时付费 → 解锁企业版以获取定制合约、SLA 或数据驻留。
开发者问题解答。
How do I integrate Didit?
Five steps from signup to first verdict.
- Create your account at
business.didit.me, or callPOST https://apx.didit.me/auth/v2/programmatic/register/. - Build a workflow in the Business Console, or call
POST /v3/workflows/. - Register a webhook destination via the console, or call
POST /v3/webhook/destinations/(Didit returns the signing secret in the response). - Create a session with
POST /v3/session/, passingworkflow_idandvendor_data(your user identifier). Redirect the user to the returned URL, or drop in a native Software Development Kit (SDK) on the same/v3/contract. - Receive the verdict on the signed webhook, or poll
GET /v3/session/:session_id/decision/.
One /v3/ Application Programming Interface (API) covers Know Your Customer (KYC), Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). 500 verifications free every month, forever, no credit card.
Is there a sandbox I can play with right now?
Yes, under sixty seconds, no credit card. Sign up at business.didit.me (or register programmatically with POST https://apx.didit.me/auth/v2/programmatic/register/) and you land in a sandbox workspace with a real Application Programming Interface (API) key.
- Same shape as production, deterministic decisions, every module unlocked.
- Real
/v3/endpoints, real webhooks, real document samples. - Switch to live whenever you are ready, same keys, same Uniform Resource Locators (URLs), same contract.
Which Software Development Kits (SDKs) do you ship?
Five first-party SDKs, all open-source, all on public docs:
- Web, JavaScript / TypeScript, framework-agnostic, iframe embed or hosted-flow redirect.
- iOS, Swift, distributed as
XCFramework. - Android, Kotlin, via Maven Central.
- React Native, TypeScript bindings on top of native modules (TurboModules).
- Flutter, Dart wrapper around the same native SDKs.
Every SDK calls the same /v3/ contract under the hood, so you can mix and match, Web on your site, native on mobile. Reference at docs.didit.me/integration/web-sdks/overview.
How do webhooks work?
Register one destination; Didit signs every delivery.
- Configure your endpoint via the Business Console, or call
POST /v3/webhook/destinations/withlabel,url, andsubscribed_events. - Didit returns a
secret_shared_keyin the response. Use it to verify the Hash-based Message Authentication Code (HMAC)-SHA256 signature on every incoming webhook (header:X-Signature-V2). - Each payload carries an exact, case-sensitive
status,"Approved","Declined","In Review","Resubmitted", and more. Full state machine atdocs.didit.me/integration/verification-statuses. - Retries use exponential backoff until you return
2xx; every delivery is logged and replayable on demand from the console.
Full reference at docs.didit.me/integration/webhooks.
What are the rate limits, and what happens at scale?
Generous defaults on every plan, tuned upward per account.
- Free tier, sandbox plus 500 production checks every month, forever.
- Pay-per-usage, burst limits scale automatically with sustained volume. You will not hit a wall mid-launch.
- Enterprise, custom rate limits, dedicated capacity, and uptime commitments in the Master Services Agreement (MSA). Talk to us at
support@didit.me.
Target capacity per region at status.didit.me. 100% real uptime over the last 6 months across millions of verifications a month.
Can I integrate with Claude Code, Cursor, or other AI coding tools?
Yes, paste one prompt and ship. Drop the canonical integration prompt at docs.didit.me/integration/integration-prompt into Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the workflow, wires the webhook, and runs a smoke test end-to-end.
Agent-initiated sessions pay the same public price as direct API calls, $0.33 per full Know Your Customer (KYC), $0.15 per standalone Identity Document Verification, $0.15 per wallet screen. Free, no extra setup, works with any Model Context Protocol (MCP)-aware client.
Where is the changelog, and how do you version the API?
Monthly release notes at `docs.didit.me/changelog`, every shipped module, every webhook event added, every breaking change called out.
- The OpenAPI 3.1 specification at
docs.didit.me/openapi-25.jsonis versioned alongside the docs. Import it into Postman or generate clients in any language. - Versioning is additive by default. New fields, new optional parameters, and new webhook events ship without a version bump. Breaking changes get a new
/v4/namespace and a published deprecation window. - We never silently change a field's meaning, if a verdict shape, signature scheme, or status enum changes, it ships behind a header and is announced before cut-over.
How do I monitor uptime and what is the incident process?
`status.didit.me` publishes real-time uptime and incident history per region, verification, webhooks, console, docs. No login required.
- Subscribe via Really Simple Syndication (RSS), email, or webhook for outage alerts.
- Track record: 100% real uptime over the last 6 months; 99.99% availability target in the Service Level Agreement (SLA).
- Every incident gets a public post-mortem on the same page.
- Enterprise contracts add a named on-call engineer, a dedicated Slack or Microsoft Teams shared channel, and incident-severity Service Level Objectives in the Master Services Agreement (MSA).