The Sumsub API lets you integrate identity verification directly into your product, giving you full control over the verification flow — from collecting applicant data and documents to receiving results programmatically. Rather than relying on the Sumsub Dashboard, you handle each step through REST API calls, making it straightforward to embed verification into your onboarding pipeline, automate applicant management, and react to outcomes in real time.
Both Production and Sandbox environments are available via api.sumsub.com. All requests are authenticated using the X-App-Token header — see Authentication for details.
Production mode access is granted after we verify that your integration works as expected.
All breaking API changes are versioned and will not affect existing endpoints. However, we may add fields to JSON responses at any time without notice or versioning — avoid object mappers in your integration code that fail on unknown properties.
Header names are case-insensitive and may vary depending on your implementation. Unless otherwise specified, the API returns JSON payloads.
Important
- To receive real-time updates on verification statuses, it is necessary to configure webhooks (primarily applicantReviewed).
- If you use JS in your backend deployment, make sure to always pass the
Content-Type: application/jsonheader unless otherwise specified, even if the actual JSON body payload is empty.
Try API with Postman
Use the following collections for Postman:
- Sumsub API. This collection includes a pre-script that throws an error every time
form-datais used. For example, the client will not be able to add an ID document image in that case. - Transaction Monitoring and Travel Rule