sumsub.com
Sumsub provides identity verification, business verification, AML screening, transaction monitoring, and related compliance workflows. Its platform helps businesses verify users and companies, review cases, and automate compliance operations.
Sumsub exposes a REST HTTP API at `https://api.sumsub.com` authenticated with app-token HMAC headers, plus an MCP server at `https://api.sumsub.com/mcp/` authenticated by interactive Sumsub account sign-in; no public GraphQL API or Sumsub CLI was found.
- Sumsub MCP serverdiscovered
- Sumsub Public APIdiscovered
In the Sumsub Dashboard, create an app token as described in App tokens. Save both the app token and its secret key when shown; the docs note these full values are displayed only once. Use the token as X-App-Token, send a current Unix timestamp in X-App-Access-Ts, and compute X-App-Access-Sig as a lowercase hex sha256 HMAC over timestamp + HTTP_METHOD + request_path_with_query + request_body using the secret key, per Authentication.
Use a Sumsub account that has the Use MCP server permission enabled for its role, as described in MCP server. Then connect from your MCP client and choose Sign in with Sumsub or the client's MCP login flow against https://api.sumsub.com/mcp/. The docs describe authenticating interactively from ChatGPT, Claude, Codex, and other MCP clients rather than manually registering an OAuth app.
conventions · 1/8 published
- integrations.json✗
/.well-known/integrations.json - llms.txt✓https://sumsub.com/llms.txt
- API catalog✗
/.well-known/api-catalog - OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✗
/.well-known/oauth-protected-resource - Agent card✗
/.well-known/agent-card.json - Agent skills✗
/.well-known/agent-skills/index.json
Publish these signals → /publishing