# Didit vs Shufti

> Didit scores 75 (BB) on agent readiness against Shufti's 57.8 (C), and leads in 6 of 7 scored categories. Shufti leads on transparency & trust. Both do kyc identity. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/didit-vs-shufti
- Markdown: https://www.anchorterminal.com/compare/didit-vs-shufti.md (~2,250 tokens)
- Slim: https://www.anchorterminal.com/compare/didit-vs-shufti.min.md (~730 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/didit-vs-shufti.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-09

Didit scores 75 (BB) on agent readiness against Shufti's 57.8 (C), and leads in 6 of 7 scored categories. Shufti leads on transparency & trust. Both do kyc identity.

- Didit: grade BB, 75/100, rank #60 of 842. Markdown https://www.anchorterminal.com/tools/didit.md · JSON https://www.anchorterminal.com/api/v1/tools/didit.json
- Shufti: grade C, 57.8/100, rank #538 of 842. Markdown https://www.anchorterminal.com/tools/shufti.md · JSON https://www.anchorterminal.com/api/v1/tools/shufti.json

## Which one, for what

### Didit (BB)

Good for: A team that wants document, liveness, screening and business registry checks from one API with public prices and no sales step, and an agent that has to set itself up.

Ahead on:
- Reliability, 80 against 65
- Schema & documentation, 88 against 58
- Agent ergonomics, 69 against 47
- Security & auth, 76 against 62
- Payments & pricing, 60 against 35
- Maintenance & community, 82 against 72

Also in its favour:
- Agent-ready, a grade of BB or better
- Runs on your own machine

Watch for: Three incidents marked major on status.didit.me from 22 July to 4 September 2026, each a partial outage of the core APIs traced to the primary database

### Shufti (C)

Good for: A team that wants document, face, address, AML and KYB checks behind one endpoint, a free plan for low volume, and an MCP server that hands the person a hosted verification link.

Ahead on:
- Transparency & trust, 71 against 63

Watch for: No OpenAPI file or other machine-readable contract was found. The reference is prose tables plus Postman collections


## Score by category

| Category | Weight | Didit | Shufti | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 80 | 65 | Didit +15 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 88 | 58 | Didit +30 |
| Agent ergonomics | 13% (16.2 this run) | 69 | 47 | Didit +22 |
| Security & auth | 14% (17.5 this run) | 76 | 62 | Didit +14 |
| Payments & pricing | 10% (12.5 this run) | 60 | 35 | Didit +25 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 82 | 72 | Didit +10 |
| Transparency & trust | 7% (8.8 this run) | 63 | 71 | Shufti +8 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **75 · BB** | **57.8 · C** | |

## Facts side by side

| Fact | Didit | Shufti |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Didit Identity Spain, S.L. | Shufti Pro Limited |
| Hosted endpoint | `https://verification.didit.me` | `https://api.shuftipro.com` |
| Transports | HTTP, Streamable HTTP, stdio | HTTP, Streamable HTTP |
| Auth | OAuth or key | OAuth or key |
| Pricing | Pay per use | Freemium |
| x402 | no | no |
| Licence | Proprietary service under Didit's Business Terms and Conditions. The MCP server in didit-protocol/mcp is MIT | Proprietary service under Shufti's Terms and Conditions. The licences of the mobile capture SDKs were not checked |
| Tools exposed | 156 | 25 |
| Read-only variant documented | no | no |
| llms.txt | yes | yes |
| MCP registry | `me.didit/mcp` | not listed |
| Last release | 2026-10-08 | 2026-10-06 |
| Terms last updated | 2026-09-23 |  |
| Privacy policy last updated | 2026-10-07 | 2026-09-01 |
| Customer content may train models | yes, with an opt-out | yes, with an opt-out |
| Terms restrict automated access | not found in the text |  |
| Terms restrict benchmarking | yes |  |
| Terms or service can change without notice | not found in the text |  |
| Arbitration or class-action waiver | not found in the text |  |
| Popularity | 0 stars, 27k npm/wk | 673 npm/wk |

## Verdicts

**Didit.** A self-serve verification API with public per-check prices, key registration by API, scoped keys and a 365-day audit log. The status page shows three incidents marked major between 22 July and 4 September 2026, each a partial outage of the core APIs, and the sub-processor list isn't public.

**Shufti.** One endpoint covers document, face, address, AML and KYB checks, with a free plan of 10 verifications a month, and a hosted MCP server adds OAuth with three scopes. No OpenAPI file, server SDK or idempotency key was found, and the status page history could not be read.

## Before you call either

### Didit

1. Register with `POST https://apx.didit.me/auth/v2/programmatic/register/`, then `verify-email` with the emailed 6-character code. Use a real inbox, because reserved test domains return 500.
2. Send the key as `x-api-key` to `https://verification.didit.me/v3/`. The JWT from registration works only on `apx.didit.me`.
3. Create a workflow before `POST /v3/session/`. `workflow_id` is the only required field, and an unfinished session with the same `vendor_data` is returned again.
4. Read results from webhooks and use `GET /v3/session/{sessionId}/decision/` for back-fill. Every per-feature result is a plural array.
5. The MCP server at `https://mcp.didit.me/mcp` takes OAuth sign-in only, never an API key. Approve `didit:verification` alone when the task doesn't change workflows or keys.

### Shufti

1. POST every verification to `https://api.shuftipro.com/` with a unique `reference` of 6 to 250 characters and one object per service. Read results from `/status` with that reference
2. Register the callback domain in the back office first. An unregistered `callback_url` is rejected
3. Stay under 60 requests a minute per IP on a production account and 20 on a trial account
4. Check the `Signature` response header. Accounts created after 15 March 2023 hash the Secret Key with SHA-256 before appending it to the raw response
5. Through MCP, identity checks return a `verification_url` for the person to open. No tool accepts an image, so use the REST API for offsite proofs

## Questions

### Which is better for AI agents, Didit or Shufti?

Didit scores 75 (BB) on agent readiness against Shufti's 57.8 (C), and leads in 6 of 7 scored categories. Shufti leads on transparency & trust.

### Do Didit and Shufti need an API key?

Both take an API key or an OAuth sign-in.

### Can an agent call Didit and Shufti without installing anything?

Yes. Didit has a hosted endpoint at https://verification.didit.me and Shufti at https://api.shuftipro.com.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/didit-vs-shufti.json, and with the fewest tokens: https://www.anchorterminal.com/compare/didit-vs-shufti.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "didit", "b": "shufti"}`. From a terminal: `anchor compare didit shufti`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/didit.json and https://www.anchorterminal.com/api/v1/tools/shufti.json

## Other comparisons with Didit or Shufti

- [ComplyCube vs Didit](https://www.anchorterminal.com/compare/complycube-vs-didit.md)
- [ComplyCube vs Shufti](https://www.anchorterminal.com/compare/complycube-vs-shufti.md)
- [Didit vs Jumio](https://www.anchorterminal.com/compare/didit-vs-jumio.md)
- [Didit vs Middesk](https://www.anchorterminal.com/compare/didit-vs-middesk.md)
- [Didit vs Persona](https://www.anchorterminal.com/compare/didit-vs-persona.md)
- [Didit vs Socure RiskOS](https://www.anchorterminal.com/compare/didit-vs-socure-riskos.md)
- [Didit vs Sumsub](https://www.anchorterminal.com/compare/didit-vs-sumsub.md)
- [Didit vs Trulioo](https://www.anchorterminal.com/compare/didit-vs-trulioo.md)
- [Didit vs Veriff](https://www.anchorterminal.com/compare/didit-vs-veriff.md)
- [Jumio vs Shufti](https://www.anchorterminal.com/compare/jumio-vs-shufti.md)
- [Persona vs Shufti](https://www.anchorterminal.com/compare/persona-vs-shufti.md)
- [Shufti vs Socure RiskOS](https://www.anchorterminal.com/compare/shufti-vs-socure-riskos.md)
- [Shufti vs Sumsub](https://www.anchorterminal.com/compare/shufti-vs-sumsub.md)
- [Shufti vs Trulioo](https://www.anchorterminal.com/compare/shufti-vs-trulioo.md)
- [Shufti vs Veriff](https://www.anchorterminal.com/compare/shufti-vs-veriff.md)
- [ComplyAdvantage vs Didit](https://www.anchorterminal.com/compare/complyadvantage-vs-didit.md)
- [ComplyAdvantage vs Shufti](https://www.anchorterminal.com/compare/complyadvantage-vs-shufti.md)
- [Middesk vs Shufti](https://www.anchorterminal.com/compare/middesk-vs-shufti.md)