Write a review

Head to head · Identity verification · October 2026 research run

Didit vs Entrust Identity Verification (formerly Onfido)

Didit scores 75 (BB) on agent readiness against Entrust Identity Verification (formerly Onfido)'s 62.1 (B), and leads in 6 of 7 scored categories. Entrust Identity Verification (formerly Onfido) leads on transparency & trust. Both do identity verification.

Best identity and business verification APIs for AI agents · All 119 verification comparisons

DiditDidit Identity Spain, S.L. · HTTP API BB75/100#63 of 1076 Entrust Identity Verification (formerly Onfido)Onfido Ltd (Entrust) · HTTP API B62.1/100#472 of 1076

Which one, for what

Didit BB

Best for A team that wants document, liveness, screening and business registry checks from one API with public prices and no sales step, and an agent that has to set itself up.

Ahead on

  • Reliability, 80 against 70
  • Security & auth, 76 against 58
  • Payments & pricing, 60 against 20
  • Maintenance & community, 82 against 58

Also in its favour

  • Agent-ready, a grade of BB or better
  • A hosted endpoint, with nothing to install
  • Runs on your own machine
  • Free to start without a card

Watch for

Three incidents marked major on status.didit.me from 22 July to 4 September 2026, each a partial outage of the core APIs traced to the primary database

Entrust Identity Verification (formerly Onfido) B

Best for A company already contracted with Entrust that wants an agent to create applicants, start workflow runs and read reports through typed libraries and a public spec.

Ahead on

  • Transparency & trust, 70 against 63

Watch for

entrust.com answered 403 to every request, so the terms, privacy notice, pricing page and security.txt weren't read

Score by category

CategoryWeight this runDiditEntrust Identity Verification (formerly Onfido)Edge
Reliability16%208070Didit +10
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28884Didit +4
Agent ergonomics13%16.26965Didit +4
Security & auth14%17.57658Didit +18
Payments & pricing10%12.56020Didit +40
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88258Didit +24
Transparency & trust7%8.86370Entrust Identity Verification (formerly Onfido) +7
Negative events≤1500
TotalBB 75/100B 62.1/100

Facts side by side

FactDiditEntrust Identity Verification (formerly Onfido)
KindHTTP APIHTTP API
VendorDidit Identity Spain, S.L.Onfido Ltd (Entrust)
Hosted endpointhttps://verification.didit.meno (local only)
TransportsHTTP, Streamable HTTP, stdioHTTP
AuthOAuth or keyOAuth or key
PricingPay per usePaid
x402nono
LicenceProprietary service under Didit's Business Terms and Conditions. The MCP server in didit-protocol/mcp is MITProprietary service under Entrust's terms. The OpenAPI spec and the server libraries (onfido-java, onfido-node, onfido-php, onfido-python, onfido-ruby) are MIT
Tools exposed156none
Read-only variant documentednono
llms.txtyesyes
MCP registryme.didit/mcpnot listed
Last release2026-10-082026-08-31
Terms last updated2026-09-23couldn't be read
Privacy policy last updated2026-10-07
Customer content may train modelsyes, with an opt-outcouldn't be read
Terms restrict automated accessnot found in the textcouldn't be read
Terms restrict benchmarkingyescouldn't be read
Terms or service can change without noticenot found in the textcouldn't be read
Arbitration or class-action waivernot found in the textcouldn't be read
Popularity0 stars, 27k npm/wk59k npm/wk, 27k PyPI/wk

Verdicts

Didit

A self-serve verification API with public per-check prices, key registration by API, scoped keys and a 365-day audit log. The status page shows three incidents marked major between 22 July and 4 September 2026, each a partial outage of the core APIs, and the sub-processor list isn't public.

Entrust Identity Verification (formerly Onfido)

The v3.6 API has a public MIT OpenAPI file, server libraries in five languages, OAuth client credentials with scopes and an 18-month deprecation notice. Entrust's own site answered 403, so terms, privacy notice, pricing and security.txt weren't read. There is no idempotency key, and live tokens need a Dashboard account with billing details.

Before you call either

Didit

  1. Register with POST https://apx.didit.me/auth/v2/programmatic/register/, then verify-email with the emailed 6-character code. Use a real inbox, because reserved test domains return 500.
  2. Send the key as x-api-key to https://verification.didit.me/v3/. The JWT from registration works only on apx.didit.me.
  3. Create a workflow before POST /v3/session/. workflow_id is the only required field, and an unfinished session with the same vendor_data is returned again.
  4. Read results from webhooks and use GET /v3/session/{sessionId}/decision/ for back-fill. Every per-feature result is a plural array.
  5. The MCP server at https://mcp.didit.me/mcp takes OAuth sign-in only, never an API key. Approve didit:verification alone when the task doesn't change workflows or keys.

Entrust Identity Verification (formerly Onfido)

  1. Use the regional host for the account (api.eu, api.us or api.ca.onfido.com/v3.6). v3.6 has no default region
  2. Prefer an OAuth client with only the scopes the task needs over a live API token, and refresh the 60-minute access token
  3. Stay under 400 requests a minute live and 120 in sandbox, and back off on a 429 rate_limit error
  4. Check before retrying a POST. There is no idempotency key, so a retry can create a second applicant or check
  5. Treat webhook events as duplicates or out of order, and verify X-SHA2-Signature over the raw body

Questions

Which is better for AI agents, Didit or Entrust Identity Verification (formerly Onfido)?

Didit scores 75 (BB) on agent readiness against Entrust Identity Verification (formerly Onfido)'s 62.1 (B), and leads in 6 of 7 scored categories. Entrust Identity Verification (formerly Onfido) leads on transparency & trust.

Do Didit and Entrust Identity Verification (formerly Onfido) need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Didit and Entrust Identity Verification (formerly Onfido) without installing anything?

Didit has a hosted endpoint at https://verification.didit.me. No hosted endpoint is listed for Entrust Identity Verification (formerly Onfido).

Other comparisons with Didit or Entrust Identity Verification (formerly Onfido)

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report