Issue a new verification link for a HOSTED session. The create response already carries the first link, so call this endpoint only to replace a link that expired or leaked. Read link_expires_at for the new deadline. The previous link may stop working as soon as Blaaiz issues a new one. A new link also stops the current web SDK access token of the session. The link is a live credential for one session: send it over a private channel and keep it out of your logs. The request takes no body. Blaaiz refuses the call when the session is terminal, and when the session is HEADLESS. Every HOSTED session can take a verification link, including a session with no selfie step. Signa must be enabled for your business. Required scope: compliance-kyc:create.
Authorization
oauth2ClientCredentials compliance-kyc:createUse your OAuth client credentials to obtain a short-lived Bearer token from POST /oauth/token.
In: header
Scope: compliance-kyc:create
Path Parameters
The verification session id returned by the create endpoint.
uuidResponse Body
application/json
application/json
application/json
application/json
application/json
curl --request POST \ --url 'https://example.com/api/external/compliance/kyc/sessions/9f2c7b41-6d3e-4c8a-9a20-1e6f0b5d7c33/verification-link'{ "message": "Verification link issued successfully.", "data": { "verification_link": "https://id.blaaiz.com/c/8Kq2rV5wZs1tYb7NfPjX0aLmC4hD6gEuR9oT3nQiWxs", "link_expires_at": "2026-08-29T09:44:22.000Z" }}POSTSubmit a verification session for review
Send the session for review. The session moves to IN_REVIEW, stops accepting documents, and no longer expires. The request takes no body. Blaaiz refuses the submit when any step of the requirement set is still PENDING, when the session already left AWAITING_INPUT, and when the session is HOSTED. A step that is null never blocks the submit. The person completes a HOSTED session on the verification link. A HOSTED session answers the submit with the message: This session is completed by the end customer on the verification link. Send the customer the verification_link, or call POST /sessions/{id}/verification-link to issue a new one. Signa must be enabled for your business. Required scope: `compliance-kyc:create`.
POSTIssue a web SDK access token
Get the access token for a HOSTED session, so that the web SDK can open the verification page in a popup on your own page. Call this endpoint from your server, then send `access_token` to your page and call `signa.startSession({ accessToken })`. The token is valid for 30 minutes from when Blaaiz made it. While the current token has more than 10 minutes left, a new call returns the same token. With 10 minutes or less left, the call returns a new token, and the previous token and the previous verification link stop working. A new verification link also stops the current access token. The session must be HOSTED and AWAITING_INPUT, and its verification page must be a page that Blaaiz hosts. The request takes no body. Signa must be enabled for your business. Required scope: `compliance-kyc:create`.