Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Bearer token for authentication. See Authentication.

Body

application/json
externalId
string<no-null-bytes>
required

Your unique identifier for this user/verification

Minimum string length: 1
Example:

"user-zm-98765"

country
enum<string>
required

ISO country code. See Supported countries for valid codes.

Available options:
AF,
AX,
AL,
DZ,
AS,
AD,
AO,
AI,
AQ,
AG,
AR,
AM,
AW,
AU,
AT,
AZ,
BS,
BH,
BD,
BB,
BY,
BE,
BZ,
BJ,
BM,
BT,
BO,
BQ,
BA,
BW,
BV,
BR,
IO,
BN,
BG,
BF,
BI,
CV,
KH,
CM,
CA,
KY,
CF,
TD,
CL,
CN,
CX,
CC,
CO,
KM,
CG,
CD,
CK,
CR,
CI,
HR,
CU,
CW,
CY,
CZ,
DK,
DJ,
DM,
DO,
EC,
EG,
SV,
GQ,
ER,
EE,
SZ,
ET,
FK,
FO,
FJ,
FI,
FR,
GF,
PF,
TF,
GA,
GM,
GE,
DE,
GH,
GI,
GR,
GL,
GD,
GP,
GU,
GT,
GG,
GN,
GW,
GY,
HT,
HM,
VA,
HN,
HK,
HU,
IS,
IN,
ID,
IR,
IQ,
IE,
IM,
IL,
IT,
JM,
JP,
JE,
JO,
KZ,
KE,
KI,
KP,
KR,
KW,
KG,
LA,
LV,
LB,
LS,
LR,
LY,
LI,
LT,
LU,
MO,
MG,
MW,
MY,
MV,
ML,
MT,
MH,
MQ,
MR,
MU,
YT,
MX,
FM,
MD,
MC,
MN,
ME,
MS,
MA,
MZ,
MM,
NA,
NR,
NP,
NL,
NC,
NZ,
NI,
NE,
NG,
NU,
NF,
MK,
MP,
NO,
OM,
PK,
PW,
PS,
PA,
PG,
PY,
PE,
PH,
PN,
PL,
PT,
PR,
QA,
RE,
RO,
RU,
RW,
BL,
SH,
KN,
LC,
MF,
PM,
VC,
WS,
SM,
ST,
SA,
SN,
RS,
SC,
SL,
SG,
SX,
SK,
SI,
SB,
SO,
ZA,
GS,
SS,
ES,
LK,
SD,
SR,
SJ,
SE,
CH,
SY,
TW,
TJ,
TZ,
TH,
TL,
TG,
TK,
TO,
TT,
TN,
TR,
TM,
TC,
TV,
UG,
UA,
AE,
GB,
US,
UM,
UY,
UZ,
VU,
VE,
VN,
VG,
VI,
WF,
EH,
YE,
ZM,
ZW
Example:

"ZM"

successUrl
string<uri>
required

URL to redirect user after successful verification completion

Pattern: ^https?://
Example:

"https://your-website.com/success"

errorUrl
string<uri>
required

URL to redirect user if verification fails or encounters an error

Pattern: ^https?://
Example:

"https://your-website.com/error"

supportUrl
string<uri>
required

URL where user can get support or help during verification

Pattern: ^https?://
Example:

"https://your-website.com/support"

phoneNo
string<no-null-bytes>

Optional phone number. If not provided, extracted from metadata.

Example:

"+260971234567"

requirements
object[]

Array of verification requirements. When omitted, derived from the selected workflow (workflowId, else the country/fallback config). See Requirements for workflow examples.

Minimum array length: 1
Example:
metadata
object

Custom key-value data to associate with the verification. Stored and returned in responses and webhooks.

Example:
expiresAt
string<date-time>

Optional expiration date for this verification session (ISO 8601 format)

Example:

"2025-08-27T09:00:00.000Z"

createdBy
string<no-null-bytes>

Optional email/identifier of the person creating this verification

workflowId
string<no-null-bytes>

Override the country-based workflow selection with a specific verification workflow. This is the 8-character workflow shortId shown in backoffice.

Required string length: 8
Example:

"aB1cD2eF"

Response

Default Response

id
string
required

Verification ID

Example:

"aB1cD2eF"

externalId
string
required

Your external identifier for this verification

Example:

"user-zm-98765"

country
enum<string> | null
required

ISO country code associated with this verification

Available options:
AF,
AX,
AL,
DZ,
AS,
AD,
AO,
AI,
AQ,
AG,
AR,
AM,
AW,
AU,
AT,
AZ,
BS,
BH,
BD,
BB,
BY,
BE,
BZ,
BJ,
BM,
BT,
BO,
BQ,
BA,
BW,
BV,
BR,
IO,
BN,
BG,
BF,
BI,
CV,
KH,
CM,
CA,
KY,
CF,
TD,
CL,
CN,
CX,
CC,
CO,
KM,
CG,
CD,
CK,
CR,
CI,
HR,
CU,
CW,
CY,
CZ,
DK,
DJ,
DM,
DO,
EC,
EG,
SV,
GQ,
ER,
EE,
SZ,
ET,
FK,
FO,
FJ,
FI,
FR,
GF,
PF,
TF,
GA,
GM,
GE,
DE,
GH,
GI,
GR,
GL,
GD,
GP,
GU,
GT,
GG,
GN,
GW,
GY,
HT,
HM,
VA,
HN,
HK,
HU,
IS,
IN,
ID,
IR,
IQ,
IE,
IM,
IL,
IT,
JM,
JP,
JE,
JO,
KZ,
KE,
KI,
KP,
KR,
KW,
KG,
LA,
LV,
LB,
LS,
LR,
LY,
LI,
LT,
LU,
MO,
MG,
MW,
MY,
MV,
ML,
MT,
MH,
MQ,
MR,
MU,
YT,
MX,
FM,
MD,
MC,
MN,
ME,
MS,
MA,
MZ,
MM,
NA,
NR,
NP,
NL,
NC,
NZ,
NI,
NE,
NG,
NU,
NF,
MK,
MP,
NO,
OM,
PK,
PW,
PS,
PA,
PG,
PY,
PE,
PH,
PN,
PL,
PT,
PR,
QA,
RE,
RO,
RU,
RW,
BL,
SH,
KN,
LC,
MF,
PM,
VC,
WS,
SM,
ST,
SA,
SN,
RS,
SC,
SL,
SG,
SX,
SK,
SI,
SB,
SO,
ZA,
GS,
SS,
ES,
LK,
SD,
SR,
SJ,
SE,
CH,
SY,
TW,
TJ,
TZ,
TH,
TL,
TG,
TK,
TO,
TT,
TN,
TR,
TM,
TC,
TV,
UG,
UA,
AE,
GB,
US,
UM,
UY,
UZ,
VU,
VE,
VN,
VG,
VI,
WF,
EH,
YE,
ZM,
ZW
Example:

"ZM"

phoneNo
string | null
required

Phone number associated with this verification

Example:

"+260971234567"

workflowId
string | null
required

shortId of the workflow that runs this verification. Null for legacy verifications created before workflows were persisted.

Example:

"wf3kD9aB"

requirements
object[]
required

Verification steps the user must complete. See Requirements for workflow examples.

Example:
url
string
required

URL where the user should complete the verification

Example:

"https://app.pawapass.com/your-company/aB1cD2eF"

status
enum<string>
required

Current status. See Verification flow for lifecycle.

Available options:
CREATED,
STARTED,
EXPIRED,
USER_DATA_COLLECTED,
REVIEW,
APPROVED,
DECLINED
Example:

"CREATED"

metadata
any | null
required

Custom metadata provided during verification creation

Example:
successUrl
string
required

URL to redirect user after successful verification

Example:

"https://your-website.com/success"

errorUrl
string
required

URL to redirect user if verification fails

Example:

"https://your-website.com/error"

supportUrl
string
required

URL where user can get support

Example:

"https://your-website.com/support"

identityDocument
object | null
required

Extracted identity document data. Null if not yet available

faceScan
object | null
required

Face scan results. Null if not yet available

reviewResult
object | null
required

Review outcome details. Null when verification has not been reviewed or no review reason is available.

createdBy
string | null
required

Identifier of the person/system that created the verification

expiresAt
string<date-time>
required

Expiration date of the verification session

Example:

"2025-08-27T09:00:00.000Z"

createdAt
string<date-time>
required

Creation date of the verification

Example:

"2025-08-20T09:00:00.000Z"

updatedAt
string<date-time>
required

Date of the last update

Example:

"2025-08-20T09:00:00.000Z"