Entrust Identity Verification (Onfido)

Drive the product through a documented public API G

Agent access

Connect an agent via an official MCP server G

Agent access

Delegate tasks to a built-in AI assistant inside the product G

Agentic features

Plug MCP servers into this product so it can use their tools G

Agent access

Point an agent at llms.txt or agent-oriented docs G

Agent access

Subscribe to events via webhooks G

Agent access

Build against official SDKs G

Agent access

Run the product headlessly / in CI for automation G

Agent access

Set up automations that run autonomously in the background G

Agentic features

Issue scoped/least-privilege API credentials for an agent G

Agent access

Rely on versioned APIs with a documented deprecation policy G

Api quality

Get AI-generated insights and suggestions from my data inside the product G

Agentic features

Download a machine-readable API spec (OpenAPI or equivalent) G

Api quality

Explore an interactive API reference with runnable examples G

Api quality

Operate the product with natural-language commands G

Agentic features

Use an official CLI G

Agent access

Test against a sandbox environment without touching production data G

Api quality

Configure verification logic without code — conditional steps, risk-based routing, country-specific requirements, and template changes that don't need an engineering deploy C

Workflows

Define rules that trigger actions automatically on events G

Launch a complete document-plus-selfie verification with a hosted or drop-in flow — create a session server-side, redirect or embed, and read the result — without building capture UI myself C

Hosted flows

The whole verification lifecycle is drivable through the API — create a session, get its status, retrieve results and captured media, and cancel or redact it — with every step documented C

Session api

An agent can operate the verification pipeline — create sessions, poll outcomes, retrieve extracted data, and trigger re-checks through the API or an MCP surface with scoped credentials C

Agent operations

Selfie checks match the live user to the document portrait with liveness detection — documented defenses against printed photos, screens, and replayed video C

Liveness

The platform verifies government IDs from a documented breadth of countries and document types — passports, national IDs, driver licenses, residence permits — with the supported list published C

Doc types

A sandbox lets me exercise every outcome before going live — documented test documents, personas, or magic values that deterministically produce pass, fail, and review results C

Sandbox

Export all of my data in open formats and leave G

Prevent my data from being used to train AI models G

Self-host the core product G

Screen verified users against sanctions, PEP, and adverse-media watchlists as part of the same verification — one vendor, one API, one review surface C

Screening

Verification lifecycle events arrive as signed webhooks — created, processing, verified, requires-input — so my system reacts to outcomes without polling C

Webhooks

Send a verification to someone with a no-code link or QR code — no engineering ticket to verify a one-off customer, contractor, or seller C

No code

The platform detects repeat and duplicate identities across verifications — the same face or document resurfacing under different names is flagged automatically C

Duplicate detection

Verification outcomes come back structured enough for an agent to decide on — machine-readable check results, risk signals, and failure reasons an automated onboarding flow can branch on C

Agent decisions

Do everything through the API that I can do in the UI G

I get native iOS, Android, and web SDKs with guided camera capture — glare, blur, and edge detection coaching the user to a usable document photo on the first try C

Native sdks

A person verified once can be recognized and reused across sessions or products — documented re-verification and reuse of a prior passed check instead of forcing a full re-run C

Reuse

Enrich verifications with phone, email, and device risk signals — carrier checks, address history, device fingerprint — as additional documented check types C

Risk signals

Perform bulk operations across many items at once G

Screening is not one-shot — previously verified users are continuously re-screened against watchlist updates, and changes raise events I can act on C

Monitoring

The vendor documents specific defenses against AI-generated faces, deepfakes, and camera-injection attacks — named detection capabilities, not just a marketing mention of fraud C

Deepfake defense

Verified sessions return the extracted document fields as structured data — name, date of birth, document number, address, expiry — retrievable via the API, not just a pass/fail flag C

Extraction

Borderline verifications land in a manual review queue with the full evidence — document images, extracted fields, check results — and reviewer decisions feed back into the record C

Review

Choose where my data is stored (region/residency) G

Control data retention and deletion G

Control what happens to collected identity data — documented retention windows and a redaction or deletion API that scrubs PII on demand C

Redaction

Opt out of telemetry and usage tracking G

Read the product's source under an open license G

Schedule recurring jobs or workflows G

See verification funnel analytics — pass rates, drop-off points, completion time by country and document type — to know what verification is costing me in signups C

Analytics

The vendor documents how biometric data is handled lawfully — GDPR bases, US biometric statutes like BIPA, and the consent language my flow needs — so legal review has something to review C

Consent

Verify businesses, not just people — registry lookups, UBO identification, and documented KYB flows that chain into KYC on the owners C

Kyb

Verify identity against authoritative databases without documents — SSN, national registries, or credit-header data — for lower-friction flows where a doc scan is overkill C

Db checks

Version, review, and roll back my automations G