ThisVerify API

Authorization: Bearer tv_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

curl -X POST https://thisverify-green.vercel.app/api/v1/scans \
  -H "Authorization: Bearer $THISVERIFY_KEY" \
  -H "Idempotency-Key: loan-88231-doc-1" \
  -F "file=@transfer.pdf" \
  -F 'context={"document_type":"bank_transfer","expected_amount":"12500","expected_name":"ישראל ישראלי"}' \
  -F "client_reference=loan-88231"

# → 202 {"id":"8f1c…","object":"scan","status":"queued",…}

curl https://thisverify-green.vercel.app/api/v1/scans/8f1c… -H "Authorization: Bearer $THISVERIFY_KEY"

POST /api/v1/scans
Content-Type: application/json
Idempotency-Key: 4c1f…

{
  "file": { "name": "payslip-06.pdf", "content_base64": "JVBERi0xLjcK…" },
  "context": { "document_type": "payslip", "expected_name": "Dana Levi" },
  "client_reference": "app-55102",
  "metadata": { "branch": "tel-aviv", "officer": "u-1182" },
  "lang": "en"
}

{
  "id": "8f1c2a4e-…",
  "object": "scan",
  "status": "completed",
  "verdict": "high_risk",
  "risk_score": 91,
  "document_type": "bank_transfer",
  "issuer": "בנק הפועלים",
  "channel": "app_screenshot",
  "client_reference": "loan-88231",
  "report": {
    "summary": "…",
    "recommended_actions": ["…"],
    "findings": [
      {
        "id": "ai-1",
        "category": "visual",
        "severity": "high",
        "confidence": 0.93,
        "title": "Amount digits re-rendered",
        "detail": "The digits of the amount use a different font weight and anti-aliasing…",
        "box": { "page": 1, "box_2d": [412, 520, 446, 700] }
      }
    ],
    "checks": [ { "id": "arith", "label": "…", "status": "fail", "detail": "…" } ],
    "extracted": { "amounts": ["12,500.00"], "dates": ["2026-10-05"], "iban": "IL62…" },
    "forensic_analysis": { "pixel_variance": { "has_variance": true, "score": 0.88 } },
    "engine": { "version": "…", "duration_ms": 31244, "layers": ["pdf", "metadata", "ela", "content", "ai"] }
  }
}

{
  "object": "list",
  "data": [ { "id": "…", "object": "scan", "status": "completed", "verdict": "review", … } ],
  "has_more": true,
  "next_cursor": "eyJ0IjoiMjAyNi0xMC0w…"
}

{
  "object": "usage",
  "plan": { "id": "business", "name": "Business" },
  "period": { "start": "2026-10-01T00:00:00.000Z", "end": "2026-11-01T00:00:00.000Z" },
  "used": 1840,
  "limit": 5000,
  "remaining": 3160,
  "total_scans": 22114
}

ThisVerify-Event: scan.completed
ThisVerify-Delivery: 5b0e…            ← unique event id (dedupe on it)
ThisVerify-Signature: t=1791364364,v1=3f9a…

{
  "id": "5b0e…",
  "type": "scan.completed",
  "created": "2026-10-07T09:13:21.004Z",
  "data": {
    "scan": {
      "id": "8f1c…", "object": "scan", "status": "completed",
      "verdict": "high_risk", "risk_score": 91, "document_type": "bank_transfer",
      "client_reference": "loan-88231", "metadata": { "branch": "tel-aviv" },
      "file": { "name": "transfer.pdf", "sha256": "…" }
    }
  }
}

import crypto from 'node:crypto';

export function verifyThisVerify(rawBody, header, secret, toleranceSec = 300) {
  const parts = Object.fromEntries(header.split(',').map(p => p.split('=')));
  const t = Number(parts.t);
  if (!t || Math.abs(Date.now() / 1000 - t) > toleranceSec) return false;
  const expected = crypto.createHmac('sha256', secret).update(`${t}.${rawBody}`).digest('hex');
  const a = Buffer.from(expected), b = Buffer.from(parts.v1 || '');
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

// Express: app.post('/hooks/thisverify', express.raw({ type: 'application/json' }), (req, res) => {
//   if (!verifyThisVerify(req.body.toString(), req.get('ThisVerify-Signature'), process.env.TV_WHSEC)) return res.sendStatus(400);
//   res.sendStatus(200); queue.push(JSON.parse(req.body));
// });

HTTP/1.1 402 Payment Required
X-Request-Id: req_0c51d0a3e8b14f2a9d11

{ "error": { "code": "QUOTA_EXCEEDED", "message": "The organization has used its monthly allowance.", "request_id": "req_0c51d0a3e8b14f2a9d11" } }