Write a review

Head to head · Identity verification · October 2026 research run

Entrust Identity Verification (formerly Onfido) vs Shufti

Entrust Identity Verification (formerly Onfido) scores 62.1 (B) on agent readiness against Shufti's 57.8 (C), and leads in 3 of 7 scored categories. Shufti leads on payments & pricing and maintenance & community. Both do identity verification.

Best identity and business verification APIs for AI agents · All 119 verification comparisons

Entrust Identity Verification (formerly Onfido)Onfido Ltd (Entrust) · HTTP API B62.1/100#472 of 1076 ShuftiShufti Pro Limited · HTTP API C57.8/100#631 of 1076

Which one, for what

Entrust Identity Verification (formerly Onfido) B

Best for A company already contracted with Entrust that wants an agent to create applicants, start workflow runs and read reports through typed libraries and a public spec.

Ahead on

  • Reliability, 70 against 65
  • Schema & documentation, 84 against 58
  • Agent ergonomics, 65 against 47

Watch for

entrust.com answered 403 to every request, so the terms, privacy notice, pricing page and security.txt weren't read

Shufti C

Best for A team that wants document, face, address, AML and KYB checks behind one endpoint, a free plan for low volume, and an MCP server that hands the person a hosted verification link.

Ahead on

  • Payments & pricing, 35 against 20
  • Maintenance & community, 72 against 58

Also in its favour

  • A hosted endpoint, with nothing to install
  • Free to start without a card

Watch for

No OpenAPI file or other machine-readable contract was found. The reference is prose tables plus Postman collections

Score by category

CategoryWeight this runEntrust Identity Verification (formerly Onfido)ShuftiEdge
Reliability16%207065Entrust Identity Verification (formerly Onfido) +5
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28458Entrust Identity Verification (formerly Onfido) +26
Agent ergonomics13%16.26547Entrust Identity Verification (formerly Onfido) +18
Security & auth14%17.55862Shufti +4
Payments & pricing10%12.52035Shufti +15
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.85872Shufti +14
Transparency & trust7%8.87071Shufti +1
Negative events≤1500
TotalB 62.1/100C 57.8/100

Facts side by side

FactEntrust Identity Verification (formerly Onfido)Shufti
KindHTTP APIHTTP API
VendorOnfido Ltd (Entrust)Shufti Pro Limited
Hosted endpointno (local only)https://api.shuftipro.com
TransportsHTTPHTTP, Streamable HTTP
AuthOAuth or keyOAuth or key
PricingPaidFreemium
x402nono
LicenceProprietary service under Entrust's terms. The OpenAPI spec and the server libraries (onfido-java, onfido-node, onfido-php, onfido-python, onfido-ruby) are MITProprietary service under Shufti's Terms and Conditions. The licences of the mobile capture SDKs were not checked
Tools exposednone25
Read-only variant documentednono
llms.txtyesyes
Last release2026-08-312026-10-06
Terms last updatedcouldn't be read
Privacy policy last updated2026-09-01
Customer content may train modelscouldn't be readyes, with an opt-out
Terms restrict automated accesscouldn't be read
Terms restrict benchmarkingcouldn't be read
Terms or service can change without noticecouldn't be read
Arbitration or class-action waivercouldn't be read
Popularity59k npm/wk, 27k PyPI/wk673 npm/wk

Verdicts

Entrust Identity Verification (formerly Onfido)

The v3.6 API has a public MIT OpenAPI file, server libraries in five languages, OAuth client credentials with scopes and an 18-month deprecation notice. Entrust's own site answered 403, so terms, privacy notice, pricing and security.txt weren't read. There is no idempotency key, and live tokens need a Dashboard account with billing details.

Shufti

One endpoint covers document, face, address, AML and KYB checks, with a free plan of 10 verifications a month, and a hosted MCP server adds OAuth with three scopes. No OpenAPI file, server SDK or idempotency key was found, and the status page history could not be read.

Before you call either

Entrust Identity Verification (formerly Onfido)

  1. Use the regional host for the account (api.eu, api.us or api.ca.onfido.com/v3.6). v3.6 has no default region
  2. Prefer an OAuth client with only the scopes the task needs over a live API token, and refresh the 60-minute access token
  3. Stay under 400 requests a minute live and 120 in sandbox, and back off on a 429 rate_limit error
  4. Check before retrying a POST. There is no idempotency key, so a retry can create a second applicant or check
  5. Treat webhook events as duplicates or out of order, and verify X-SHA2-Signature over the raw body

Shufti

  1. POST every verification to https://api.shuftipro.com/ with a unique reference of 6 to 250 characters and one object per service. Read results from /status with that reference
  2. Register the callback domain in the back office first. An unregistered callback_url is rejected
  3. Stay under 60 requests a minute per IP on a production account and 20 on a trial account
  4. Check the Signature response header. Accounts created after 15 March 2023 hash the Secret Key with SHA-256 before appending it to the raw response
  5. Through MCP, identity checks return a verification_url for the person to open. No tool accepts an image, so use the REST API for offsite proofs

Questions

Which is better for AI agents, Entrust Identity Verification (formerly Onfido) or Shufti?

Entrust Identity Verification (formerly Onfido) scores 62.1 (B) on agent readiness against Shufti's 57.8 (C), and leads in 3 of 7 scored categories. Shufti leads on payments & pricing and maintenance & community.

Do Entrust Identity Verification (formerly Onfido) and Shufti need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Entrust Identity Verification (formerly Onfido) and Shufti without installing anything?

No hosted endpoint is listed for Entrust Identity Verification (formerly Onfido). Shufti has a hosted endpoint at https://api.shuftipro.com.

Other comparisons with Entrust Identity Verification (formerly Onfido) or Shufti

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report