secuveriAPI docs
OpenAPIMarkdown

Passive liveness on one to three selfies

POST/v1/liveness/check

Passive presentation-attack detection: the hosted flow's two PAD models and its deepfake model on the images you send. Weaker than the hosted active liveness (no challenge, no screen flash, no capture binding): it catches printed photos, screens and masks the models know, not a replayed or injected stream. CHF 0.60 per answered call; refunded when it could not run. Needs the liveness:check scope.

Send your API key in the x-api-key header.

Headers

  • Idempotency-Keystring8–200 chars

    Reuse on retries (printable non-space ASCII). For 24 hours the same key and the same request return the saved answer and check id without a second charge; a different request under the key returns 409.

Request bodyapplication/jsonrequired

  • deepfakebooleandefault true
  • reference_idstring≤ 128 chars

    Your own id, echoed in the answer.

  • sandbox_outcomestring

    Sandbox keys only: which test answer to return. No model runs and nothing is charged.

    One oflivespoofreviewno_face

  • imagesarray of stringrequired

    One to three images of one person (or a single image field).

Responses

  • 200The answer.
    • check_idstringuuid
    • productstring
    • environmentstring | null
    • sandboxboolean
    • checked_atstringdate-time
    • reference_idstring
    • signed_resultstring

      The same answer as an ES256 JWS, verifiable with /.well-known/jwks.json.

    • decisionstring

      One ofLIVESPOOFREVIEWNO_FACE

    • liveboolean
    • modestring

      One ofpassive

    • framesarray of object
      Show 6 child properties
      • indexinteger
      • face_foundboolean
      • presentation_attackstring | null

        One ofPASSREVIEWFAIL

      • spoof_scorenumber | null

        Higher is more likely an attack.

      • deepfakestring | null

        One ofPASSREVIEW

      • deepfake_scorenumber | null
  • 400Invalid input.
  • 401Missing, unknown or expired API key.
  • 402The balance does not cover the check.
  • 403The key lacks the product's scope, its IP allowlist refuses the caller, or (code production_not_allowed) the organization may not use production yet.
  • 409The Idempotency-Key is in progress (Retry-After: 1) or was used with a different request.
  • 413A file or the body is too large.
  • 415A file is not of an accepted type (checked by its bytes, not its name), or the body is neither multipart nor JSON.
  • 422An image could not be decoded. Not charged.
  • 429More than 120 calls in a minute for this product.
  • 503The check could not run on our side. Nothing was charged; retry later with the same Idempotency-Key.
curl -X POST https://api-verify.secuveri.com/v1/liveness/check \
  -H "x-api-key: $SECUVERI_API_KEY" \
  -H "content-type: application/json" \
  -H "Idempotency-Key: signup-1042-retry-safe" \
  -d '{
  "images": [
    "string"
  ]
}'
Response · 200
{
  "check_id": "6f1c2e0a-8f43-4f7e-9a51-2b7c1d9e4a10",
  "product": "<product>",
  "environment": "<environment>",
  "sandbox": true,
  "checked_at": "2026-10-23T09:12:44.120Z",
  "reference_id": "<reference id>",
  "signed_result": "eyJhbGciOiJFUzI1NiIsImtpZCI6Ii4uLiJ9.…",
  "decision": "LIVE",
  "live": true,
  "mode": "passive",
  "frames": [
    {
      "index": 1,
      "face_found": true,
      "presentation_attack": "PASS",
      "spoof_score": 1,
      "deepfake": "PASS",
      "deepfake_score": 1
    }
  ]
}