# secuveri API docs

> Integrate secuveri identity verification: create sessions, verify Swiss companies (KYB), receive signed webhooks and results, and screen sanctions and PEP lists.

## Getting started

Your backend creates a session with an API key, the person verifies on the hosted page, and you learn the outcome from a signed webhook and a signed result.

- Base URL: `https://api-verify.secuveri.com`. One URL for both environments: `sk_test_` keys run in the sandbox, `sk_live_` keys in production.

- Authentication: send an organization API key in the `x-api-key` header on every request. Keep keys on your server, never in a browser or app. Create keys in the dashboard under Settings → API keys.

- Webhooks: each delivery is signed in `secuveri-signature` as `t=…,v1=…`, HMAC-SHA256 of `<t>.<raw body>` with your endpoint's signing secret.

- Signed results: results and AML screenings are ES256 JWS, checked with the keys at `/.well-known/jwks.json`.