Head to head · Identity verification · October 2026 research run

Entrust Identity Verification (formerly Onfido) vs Middesk

Entrust Identity Verification (formerly Onfido) scores 62.1 (B) on agent readiness against Middesk's 59 (C), and leads in 5 of 7 scored categories. Middesk leads on maintenance & community. Both do identity verification.

Best identity and business verification APIs for AI agents · All 119 verification comparisons

Which one, for what

Entrust Identity Verification (formerly Onfido) B

Best for A company already contracted with Entrust that wants an agent to create applicants, start workflow runs and read reports through typed libraries and a public spec.

Ahead on

  • Agent ergonomics, 65 against 56
  • Payments & pricing, 20 against 10
  • Transparency & trust, 70 against 61

Watch for

entrust.com answered 403 to every request, so the terms, privacy notice, pricing page and security.txt weren't read

Middesk C

Best for An agent onboarding or re-checking US businesses for a bank, lender or marketplace that already holds a Middesk contract, with registry, TIN, sanctions and lien data in one object.

Ahead on

  • Maintenance & community, 64 against 58

Also in its favour

  • A hosted endpoint, with nothing to install

Watch for

No public price. Fees are set in an order form, and every docs page ends with a prompt to contact sales

Score by category

CategoryWeight this runEntrust Identity Verification (formerly Onfido)MiddeskEdge
Reliability16%207073Middesk +3
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28482Entrust Identity Verification (formerly Onfido) +2
Agent ergonomics13%16.26556Entrust Identity Verification (formerly Onfido) +9
Security & auth14%17.55856Entrust Identity Verification (formerly Onfido) +2
Payments & pricing10%12.52010Entrust Identity Verification (formerly Onfido) +10
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.85864Middesk +6
Transparency & trust7%8.87061Entrust Identity Verification (formerly Onfido) +9
Negative events≤1500
TotalB 62.1/100C 59/100

Facts side by side

FactEntrust Identity Verification (formerly Onfido)Middesk
KindHTTP APIHTTP API
VendorOnfido Ltd (Entrust)Middesk, Inc.
Hosted endpointno (local only)https://api.middesk.com/v1
TransportsHTTPHTTP
AuthOAuth or keyOAuth or key
PricingPaidPaid
x402nono
LicenceProprietary service under Entrust's terms. The OpenAPI spec and the server libraries (onfido-java, onfido-node, onfido-php, onfido-python, onfido-ruby) are MITProprietary service under Middesk's Business Verification Terms and Conditions. The Claude Code and Codex plugins on GitHub are MIT
Tools exposednone11
Read-only variant documentednono
llms.txtyesyes
Last release2026-08-312026-10-05
Terms last updatedcouldn't be readno date given
Privacy policy last updatedno date given
Customer content may train modelscouldn't be readyes
Terms restrict automated accesscouldn't be readnot found in the text
Terms restrict benchmarkingcouldn't be readyes
Terms or service can change without noticecouldn't be readnot found in the text
Arbitration or class-action waivercouldn't be readyes
Popularity59k npm/wk, 27k PyPI/wk2 stars

Verdicts

Entrust Identity Verification (formerly Onfido)

The v3.6 API has a public MIT OpenAPI file, server libraries in five languages, OAuth client credentials with scopes and an 18-month deprecation notice. Entrust's own site answered 403, so terms, privacy notice, pricing and security.txt weren't read. There is no idempotency key, and live tokens need a Dashboard account with billing details.

Middesk

A public OpenAPI 3.1 contract for 87 operations, llms.txt, Markdown docs and a dated weekly changelog make the REST API readable to an agent, and OAuth has a read-only scope. Access is sales-led. No price, self-serve signup or official SDK was found, and the hosted MCP server rejects sandbox keys.

Before you call either

Entrust Identity Verification (formerly Onfido)

  1. Use the regional host for the account (api.eu, api.us or api.ca.onfido.com/v3.6). v3.6 has no default region
  2. Prefer an OAuth client with only the scopes the task needs over a live API token, and refresh the 60-minute access token
  3. Stay under 400 requests a minute live and 120 in sandbox, and back off on a 429 rate_limit error
  4. Check before retrying a POST. There is no idempotency key, so a retry can create a second applicant or check
  5. Treat webhook events as duplicates or out of order, and verify X-SHA2-Signature over the raw body

Middesk

  1. Match the key to the host. mk_test keys work only at https://api-sandbox.middesk.com/v1 and mk_live keys only at https://api.middesk.com/v1
  2. Name the orders on POST /v1/businesses. Omitting them places a verification order plus every package the account runs automatically, all billed
  3. Send address_line1 and address_line2. The API ignores address_line_1 without an error
  4. A 201 means the business was created, not verified. Wait for the business.updated webhook or poll until status leaves pending
  5. Stay under 20 requests a second per account, and in sandbox wait the seconds in Retry-After after a 429 on business creation

Questions

Which is better for AI agents, Entrust Identity Verification (formerly Onfido) or Middesk?

Entrust Identity Verification (formerly Onfido) scores 62.1 (B) on agent readiness against Middesk's 59 (C), and leads in 5 of 7 scored categories. Middesk leads on maintenance & community.

Do Entrust Identity Verification (formerly Onfido) and Middesk need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Entrust Identity Verification (formerly Onfido) and Middesk without installing anything?

No hosted endpoint is listed for Entrust Identity Verification (formerly Onfido). Middesk has a hosted endpoint at https://api.middesk.com/v1.

Other comparisons with Entrust Identity Verification (formerly Onfido) or Middesk

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.