Sumsub Public API

REST discovered

Details

URL: https://api.sumsub.com
Docs: https://docs.sumsub.com/reference/about-sumsub-api

Authentication

Sumsub app token + secret key for HMAC-signed API requests X-App-Token: <credential> + Sumsub app token + secret key for HMAC-signed API requests X-App-Access-Sig: <credential> + Sumsub app token + secret key for HMAC-signed API requests X-App-Access-Ts: <credential> discovered

Sumsub app token + secret key for HMAC-signed API requests compound Get key ↗

In the Sumsub Dashboard, create an app token as described in App tokens. Save both the app token and its secret key when shown; the docs note these full values are displayed only once. Use the token as X-App-Token, send a current Unix timestamp in X-App-Access-Ts, and compute X-App-Access-Sig as a lowercase hex sha256 HMAC over timestamp + HTTP_METHOD + request_path_with_query + request_body using the secret key, per Authentication.