Head to head · Identity verification · October 2026 research run

Alloy vs Entrust Identity Verification (formerly Onfido)

Entrust Identity Verification (formerly Onfido) scores 62.1 (B) on agent readiness against Alloy's 52.4 (D), and leads in 6 of 7 scored categories. Alloy leads on maintenance & community. Both do identity verification.

Best identity and business verification APIs for AI agents · All 119 verification comparisons

Which one, for what

Alloy D

Best for Banks and fintechs that already run onboarding through Alloy and want an agent to submit journey applications, read decisions and work investigations.

Ahead on

  • Maintenance & community, 72 against 58

Watch for

No public prices, trial or self-serve sign-up. Access starts with a demo request

Entrust Identity Verification (formerly Onfido) B

Best for A company already contracted with Entrust that wants an agent to create applicants, start workflow runs and read reports through typed libraries and a public spec.

Ahead on

  • Reliability, 70 against 59
  • Schema & documentation, 84 against 73
  • Agent ergonomics, 65 against 52
  • Security & auth, 58 against 49
  • Payments & pricing, 20 against 0
  • Transparency & trust, 70 against 62

Watch for

entrust.com answered 403 to every request, so the terms, privacy notice, pricing page and security.txt weren't read

Score by category

CategoryWeight this runAlloyEntrust Identity Verification (formerly Onfido)Edge
Reliability16%205970Entrust Identity Verification (formerly Onfido) +11
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27384Entrust Identity Verification (formerly Onfido) +11
Agent ergonomics13%16.25265Entrust Identity Verification (formerly Onfido) +13
Security & auth14%17.54958Entrust Identity Verification (formerly Onfido) +9
Payments & pricing10%12.5020Entrust Identity Verification (formerly Onfido) +20
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87258Alloy +14
Transparency & trust7%8.86270Entrust Identity Verification (formerly Onfido) +8
Negative events≤1500
TotalD 52.4/100B 62.1/100

Facts side by side

FactAlloyEntrust Identity Verification (formerly Onfido)
KindHTTP APIHTTP API
VendorFirst Mile Group, Inc. (Alloy)Onfido Ltd (Entrust)
Hosted endpointno (local only)no (local only)
TransportsHTTPHTTP
AuthOAuth or keyOAuth or key
PricingPaidPaid
x402nono
LicenceProprietary service under Alloy's terms of service. The @alloyidentity/web-sdk capture package is MITProprietary service under Entrust's terms. The OpenAPI spec and the server libraries (onfido-java, onfido-node, onfido-php, onfido-python, onfido-ruby) are MIT
Read-only variant documentednono
llms.txtyesyes
Last release2026-10-052026-08-31
Terms last updated2026-03-12couldn't be read
Privacy policy last updatedno date given
Customer content may train modelsnot found in the textcouldn't be read
Terms restrict automated accessyescouldn't be read
Terms restrict benchmarkingnot found in the textcouldn't be read
Terms or service can change without noticenot found in the textcouldn't be read
Arbitration or class-action waiveryescouldn't be read
Popularity21k npm/wk59k npm/wk, 27k PyPI/wk

Verdicts

Alloy

Alloy's public docs cover journeys, evaluations, entities, documents, cases and investigations, with llms.txt, Markdown pages, OpenAPI fragments and rate-limit headers with retry-after. Access is sales-led with no public price or trial, credentials have no scopes, there is no idempotency key or server SDK, and inputs vary by each customer's workflow.

Entrust Identity Verification (formerly Onfido)

The v3.6 API has a public MIT OpenAPI file, server libraries in five languages, OAuth client credentials with scopes and an 18-month deprecation notice. Entrust's own site answered 403, so terms, privacy notice, pricing and security.txt weren't read. There is no idempotency key, and live tokens need a Dashboard account with billing details.

Before you call either

Alloy

  1. Get the account's base URL from the customer. Defaults are api.alloy.co and sandbox.alloy.co, and some accounts have their own hosts
  2. Use unique, prefixed external IDs in sandbox. Sandbox and Production share one data store
  3. Read alloy-ratelimit-remaining, and on 429 or 5xx wait for retry-after with exponential backoff and jitter
  4. Expect running after about 25 seconds on journey applications and wait for the webhook instead of resubmitting
  5. Send the workflow header with account-level keys, since inputs depend on the workflow configured

Entrust Identity Verification (formerly Onfido)

  1. Use the regional host for the account (api.eu, api.us or api.ca.onfido.com/v3.6). v3.6 has no default region
  2. Prefer an OAuth client with only the scopes the task needs over a live API token, and refresh the 60-minute access token
  3. Stay under 400 requests a minute live and 120 in sandbox, and back off on a 429 rate_limit error
  4. Check before retrying a POST. There is no idempotency key, so a retry can create a second applicant or check
  5. Treat webhook events as duplicates or out of order, and verify X-SHA2-Signature over the raw body

Questions

Which is better for AI agents, Alloy or Entrust Identity Verification (formerly Onfido)?

Entrust Identity Verification (formerly Onfido) scores 62.1 (B) on agent readiness against Alloy's 52.4 (D), and leads in 6 of 7 scored categories. Alloy leads on maintenance & community.

Do Alloy and Entrust Identity Verification (formerly Onfido) need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Alloy and Entrust Identity Verification (formerly Onfido) without installing anything?

No hosted endpoint is listed for Alloy. No hosted endpoint is listed for Entrust Identity Verification (formerly Onfido).

Other comparisons with Alloy or Entrust Identity Verification (formerly Onfido)

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.