ChainPass
The ChainPass API

API documentation for your platform.

ChainPass gives platforms verified access, user confirmation, agreements, custom requirements, and credential management through one API—or through our client dashboard.

Your platform receives the answers it needs. It never receives the identity data behind them.

Public API scope and availability.

The current API source supports the client dashboard and platform integrations.

Routine verification returns the platform-configured result without legal names, government documents or biometric records. The existing manual-verification flow can serve the verified photograph after the required consent; it is not a general photograph endpoint.
The public API gateway is deployed at https://verify.chainpass.io/functions/v1/public-api. Append the /v1 paths below to that base. The public health probe reports declared facial-system status. Platform operations remain blocked by missing governed schema and document approvals. Existing native functions remain separately hosted. Source tests do not establish live provider acceptance.
What one API does

Verify, authorize, administer and prove.

01 — VERIFY

Confirm that a V.A.I. is active, compliant, and attached to the user presenting it.

02 — AUTHORIZE

Confirm access, agreements, declarations, transactions, and other platform actions through a live facial scan.

03 — ADMINISTER

Let ChainPass handle onboarding, platform requirements, verification services, and credential updates.

04 — PROVE

Maintain immutable agreement versions and verification records that cannot be rewritten after the fact.

The platform receives its configured verification result. Legal names, government documents and biometric templates remain outside the platform response.
The privacy boundary

Data returned to your platform.

Routine responses follow your platform’s configured result format. VAIRIFY receives pass/fail and colour, never a percentage. The separately consented manual flow may serve a verified photograph for comparison; it is not a general photograph retrieval API.

01 — Legal name
02 — Government ID
03 — Identity document
04 — Unconsented verified photograph
05 — Biometric template
06 — Unconfigured result fields
07 — Activity from another platform
08 — A session key after handoff

ChainPass separates verification from identity ownership. Your platform receives what it needs to make a decision—and nothing beneath it.

Capabilities

Review endpoints by capability.

Current routes are grouped below. All listed central handlers are packaged in the API gateway. Required schema, document approvals and genuine acceptance remain separate deployment blockers.

Access

Request an access decision for your user.

Platforms submit the V.A.I. and current live capture. Existing credential, platform, requirement, terms and production-face guards remain in force.

POST/v1/gate
POST/v1/gate/sign
Verification

Compare your user’s live image with the verified photo.

Live capture only. The retired photo-match route is not a separate comparison service.

POST/v1/verify
Agreements

Create agreements and retrieve verification records.

POST /v1/registry administers exact immutable documents and agreements through register, fetch, live, retire, open, display, search, status, declaration and signed_document actions. User answers and signing remain controlled by ChainPass; the platform record action is refused.

POST/v1/registry
Requirements

Configure and check your platform’s requirements.

Read configuration first, then submit the expected snapshot with a replacement selection. Writes are atomic, platform scoped and audited. Missing approved documents, inactive services and conflicting geographic policies are refused.

GET/v1/requirements
PUT/v1/requirements
GET/v1/requirements/check
GET/v1/services
PUT/v1/services
Credentials

Retrieve V.A.I. credential status.

Credential lookup preserves the private inactive-reason boundary and the governed courtesy-origin exception. Courtesy choice records intent only; activation remains in the enrollment flow. The level endpoint remains reserved.

POST/v1/credential/status
GET/v1/credentials/{vai}
POST/v1/enrol/courtesy
POST/v1/deferral
Operations

Retrieve your platform’s activity and manage its configuration.

Read only your own traffic, capacity, commissions and allowlisted settings. Key changes retain dashboard/master authority. Health reports declared facial subsystem state with live_probe:false.

GET/v1/traffic
GET/v1/blocks
GET/v1/config
GET/v1/commission
GET/v1/commissions
GET/v1/commissions/{id}
POST/v1/keys
GET/v1/health
Platform Setup

Enrollment requests and server-to-server handoff.

A signed single-use enrollment token opens the governed session. Completing the enrollment flow and its platform requirements still controls handoff.

POST/v1/enrol
Recovery

Recovery and verification fallback.

Recovery actions retain their platform or member capability authority. Manual verification requires the existing consent flow. Re-baseline requests currently open trial sessions; live provider retakes remain separate.

POST/v1/recovery
POST/v1/manual-verification
POST/v1/individual-recovery
POST/v1/rebaseline-request

Retired and reserved routes

/v1/photo-match is retired; use live verification. The historical /v1/agreements routes and /v1/proofs are replaced by the scoped registry. The /v1/credentials/{vai}/level route is reserved. These routes are excluded from the active index.

Secure system flow

Enrollment requests and server-to-server handoff.

The platform opens a secure ChainPass enrollment session. ChainPass administers verification, agreements, and platform requirements, then completes a server-to-server handoff.

The designed handoff contains the V.A.I., the one-time session key, completion status, and the affirmed terms reference. It never contains the user’s legal name, government ID, or verified photograph.

After the handoff succeeds, ChainPass deletes its copy of the session key. It cannot be retrieved through an endpoint or resent later.

01 — PLATFORMOpens a signed enrollment session
02 — CHAINPASSAdministers verification, agreements, and platform requirements
03 — SECURE HANDOFFReturns the V.A.I., one-time session key, completion status, and terms reference
04 — COMPLETEChainPass deletes its copy of the session key

ChainPass returns the minimum handoff record the platform needs. ChainPass identity data never crosses the boundary.

ChainPass offers an optional vault module that platforms deploy within their own infrastructure. It protects session keys in a separate encrypted store without placing them beside V.A.I. numbers in the platform’s primary system.

View Vault Architecture
Technical endpoints
PUT/vault/{tag}
GET/vault/{tag}
Blind tagThe tag is HMAC(platform_secret, V.A.I.). The secret lives in the platform’s runtime, not in the vault store.
RecoveryA breach of the primary database yields V.A.I. numbers and no keys. The vault store alone is noise.
Full index

Complete endpoint reference.

Search or filter the complete ChainPass API. Platform operations require the managed schema, approved documents, and live acceptance. The optional vault requires a separate receiving-platform installation.

Capability
Build with ChainPass

API integration and documentation access.

Use the ChainPass API or our client dashboard to add verified access, user confirmation, agreements, and custom platform requirements without taking custody of users’ government ID.

There are no integration or platform fees. The V.A.I. holder pays.

Start Your Integration Read the Documentation Talk to ChainPass
ChainPass
Verified users. No platform-held identity file.
Product
Home Features API FAQ Get a V.A.I.
Legal
Request terms Request privacy policy Security materials
Contact
platforms@chainpass.io support@chainpass.io Contact us
© 2026 ChainPass. All rights reserved. Patent pending