Write a review

Head to head · Identity verification · October 2026 research run

Entrust Identity Verification (formerly Onfido) vs Sumsub

Sumsub scores 68.5 (B) on agent readiness against Entrust Identity Verification (formerly Onfido)'s 62.1 (B), and leads in 5 of 7 scored categories. Entrust Identity Verification (formerly Onfido) leads on schema & documentation and agent ergonomics. Both do identity verification.

Best identity and business verification APIs for AI agents · All 119 verification comparisons

Entrust Identity Verification (formerly Onfido)Onfido Ltd (Entrust) · HTTP API B62.1/100#472 of 1076 SumsubSum and Substance Ltd · HTTP API B68.5/100#220 of 1076

Which one, for what

Entrust Identity Verification (formerly Onfido) B

Best for A company already contracted with Entrust that wants an agent to create applicants, start workflow runs and read reports through typed libraries and a public spec.

Ahead on

  • Schema & documentation, 84 against 78
  • Agent ergonomics, 65 against 60

Watch for

entrust.com answered 403 to every request, so the terms, privacy notice, pricing page and security.txt weren't read

Sumsub B

Best for An agent that starts verifications, sends links, reads results and AML cases, and works case queues for a regulated business, with one token limited to those permissions.

Ahead on

  • Reliability, 80 against 70
  • Security & auth, 80 against 58
  • Payments & pricing, 25 against 20
  • Maintenance & community, 74 against 58

Also in its favour

  • A hosted endpoint, with nothing to install

Watch for

No idempotency keys and no Retry-After or backoff guidance found in the reviewed documentation

Score by category

CategoryWeight this runEntrust Identity Verification (formerly Onfido)SumsubEdge
Reliability16%207080Sumsub +10
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28478Entrust Identity Verification (formerly Onfido) +6
Agent ergonomics13%16.26560Entrust Identity Verification (formerly Onfido) +5
Security & auth14%17.55880Sumsub +22
Payments & pricing10%12.52025Sumsub +5
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.85874Sumsub +16
Transparency & trust7%8.87074Sumsub +4
Negative events≤1500
TotalB 62.1/100B 68.5/100

Facts side by side

FactEntrust Identity Verification (formerly Onfido)Sumsub
KindHTTP APIHTTP API
VendorOnfido Ltd (Entrust)Sum and Substance Ltd
Hosted endpointno (local only)https://api.sumsub.com
TransportsHTTPHTTP
AuthOAuth or keyOAuth or key
PricingPaidPay per use
x402nono
LicenceProprietary service under Entrust's terms. The OpenAPI spec and the server libraries (onfido-java, onfido-node, onfido-php, onfido-python, onfido-ruby) are MITProprietary service under Sumsub's terms and conditions. The agent skills repository and the @sumsub/websdk npm package are MIT
Read-only variant documentednono
llms.txtyesyes
Last release2026-08-312026-10-03
Terms last updatedcouldn't be read2026-05-21
Privacy policy last updated2026-03-19
Customer content may train modelscouldn't be readyes
Terms restrict automated accesscouldn't be readnot found in the text
Terms restrict benchmarkingcouldn't be readnot found in the text
Terms or service can change without noticecouldn't be readyes
Arbitration or class-action waivercouldn't be readyes
Popularity59k npm/wk, 27k PyPI/wk172k npm/wk

Verdicts

Entrust Identity Verification (formerly Onfido)

The v3.6 API has a public MIT OpenAPI file, server libraries in five languages, OAuth client credentials with scopes and an 18-month deprecation notice. Entrust's own site answered 403, so terms, privacy notice, pricing and security.txt weren't read. There is no idempotency key, and live tokens need a Dashboard account with billing details.

Sumsub

Per-token permissions, an IP allowlist, HMAC-signed requests and a public OpenAPI spec with Markdown docs suit an agent working on verification cases. No idempotency keys or Retry-After guidance were found, there is no server SDK, and production access needs a browser signup, a bank card and Sumsub's review of the integration.

Before you call either

Entrust Identity Verification (formerly Onfido)

  1. Use the regional host for the account (api.eu, api.us or api.ca.onfido.com/v3.6). v3.6 has no default region
  2. Prefer an OAuth client with only the scopes the task needs over a live API token, and refresh the 60-minute access token
  3. Stay under 400 requests a minute live and 120 in sandbox, and back off on a 429 rate_limit error
  4. Check before retrying a POST. There is no idempotency key, so a retry can create a second applicant or check
  5. Treat webhook events as duplicates or out of order, and verify X-SHA2-Signature over the raw body

Sumsub

  1. Sign every request. X-App-Access-Sig is the lowercase hex HMAC-SHA256 of timestamp, uppercase method, path with query and raw body, and the timestamp must be within one minute of server time
  2. Use a sandbox token (prefix sbx) for agent work. Sandbox and production tokens are separate, and Sumsub's own skills refuse any other prefix
  3. Stay under 300 GET and 50 POST requests per 5 seconds, and under 500 new applicants per 24 hours in Sandbox
  4. Token permissions can't be edited after creation. Generate a new token with the narrower set and delete the old one
  5. Subscribe to the applicantReviewed webhook for results and verify x-payload-digest against the raw body before trusting it

Questions

Which is better for AI agents, Entrust Identity Verification (formerly Onfido) or Sumsub?

Sumsub scores 68.5 (B) on agent readiness against Entrust Identity Verification (formerly Onfido)'s 62.1 (B), and leads in 5 of 7 scored categories. Entrust Identity Verification (formerly Onfido) leads on schema & documentation and agent ergonomics.

Do Entrust Identity Verification (formerly Onfido) and Sumsub need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Entrust Identity Verification (formerly Onfido) and Sumsub without installing anything?

No hosted endpoint is listed for Entrust Identity Verification (formerly Onfido). Sumsub has a hosted endpoint at https://api.sumsub.com.

Other comparisons with Entrust Identity Verification (formerly Onfido) or Sumsub

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report