Head to head · Kyc identity · October 2026 research run

Jumio vs Middesk

Middesk scores 59 (C) on agent readiness against Jumio's 55 (C), and leads in 5 of 7 scored categories. Jumio leads on security & auth and maintenance & community. Both do kyc identity.

Which one, for what

Jumio C

Good for An enterprise with a Jumio contract that wants document, selfie and liveness checks, watchlist screening and Latin American, Thai and Australian database checks behind OpenAPI-described endpoints.

Ahead on

  • Security & auth, 63 against 56
  • Maintenance & community, 75 against 64

Watch for

No public price, free tier or trial. OAuth2 and workflow keys are activated by a Jumio account manager

Middesk C

Good for An agent onboarding or re-checking US businesses for a bank, lender or marketplace that already holds a Middesk contract, with registry, TIN, sanctions and lien data in one object.

Ahead on

  • Reliability, 73 against 65
  • Schema & documentation, 82 against 73
  • Agent ergonomics, 56 against 45
  • Payments & pricing, 10 against 0

Also in its favour

  • A hosted endpoint, with nothing to install

Watch for

No public price. Fees are set in an order form, and every docs page ends with a prompt to contact sales

Score by category

CategoryWeight this runJumioMiddeskEdge
Reliability16%206573Middesk +8
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27382Middesk +9
Agent ergonomics13%16.24556Middesk +11
Security & auth14%17.56356Jumio +7
Payments & pricing10%12.5010Middesk +10
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87564Jumio +11
Transparency & trust7%8.86061Middesk +1
Negative events≤1500
Total55 · C59 · C

Facts side by side

FactJumioMiddesk
KindHTTP APIHTTP API
VendorJumio CorporationMiddesk, Inc.
Hosted endpointno (local only)https://api.middesk.com/v1
TransportsHTTPHTTP
AuthOAuthOAuth or key
PricingPaidPaid
x402nono
LicenceProprietary service. No public service agreement was found. The @jumio/websdk npm package is marked UNLICENSEDProprietary service under Middesk's Business Verification Terms and Conditions. The Claude Code and Codex plugins on GitHub are MIT
Tools exposednone11
Read-only variant documentednono
llms.txtyesyes
Last release2026-09-282026-10-05
Terms last updatedno document linkedno date given
Privacy policy last updated2026-08-04no date given
Customer content may train modelsyesyes
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingyes
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity72 stars, 2.1k npm/wk2 stars

Verdicts

Jumio

Five OpenAPI 3.0 files, an llms.txt index and OAuth2 clients limited to initiating or to retrieving and deleting make the API readable and containable. Access starts with an account manager, with no public price, trial or service agreement, and the status page shows four processing degradations and a 35-minute Singapore outage between 14 August and 2 October 2026.

Middesk

A public OpenAPI 3.1 contract for 87 operations, llms.txt, Markdown docs and a dated weekly changelog make the REST API readable to an agent, and OAuth has a read-only scope. Access is sales-led. No price, self-serve signup or official SDK was found, and the hosted MCP server rejects sandbox keys.

Before you call either

Jumio

  1. Use the host for the tenant's region (amer-1, emea-1 or apac-1). Tokens come from auth.<region>.jumio.ai/oauth2/token with the client ID and secret as Basic credentials
  2. Reuse the bearer token for its 60 minutes. Token requests are limited to 10 a second and new transactions to 1 a second per tenant
  3. Send a User-Agent header on every call. The Account API marks it required
  4. Don't blindly retry POST /api/v1/accounts. Each call creates an account and a transaction, and no idempotency key exists
  5. Wait for the callback or poll the status endpoint until PROCESSED before retrieving. Jumio's retry schedule starts at 40 seconds and stops after 940

Middesk

  1. Match the key to the host. mk_test keys work only at https://api-sandbox.middesk.com/v1 and mk_live keys only at https://api.middesk.com/v1
  2. Name the orders on POST /v1/businesses. Omitting them places a verification order plus every package the account runs automatically, all billed
  3. Send address_line1 and address_line2. The API ignores address_line_1 without an error
  4. A 201 means the business was created, not verified. Wait for the business.updated webhook or poll until status leaves pending
  5. Stay under 20 requests a second per account, and in sandbox wait the seconds in Retry-After after a 429 on business creation

Questions

Which is better for AI agents, Jumio or Middesk?

Middesk scores 59 (C) on agent readiness against Jumio's 55 (C), and leads in 5 of 7 scored categories. Jumio leads on security & auth and maintenance & community.

Do Jumio and Middesk need an API key?

Jumio uses an OAuth sign-in. Middesk takes an API key or an OAuth sign-in.

Can an agent call Jumio and Middesk without installing anything?

No hosted endpoint is listed for Jumio. Middesk has a hosted endpoint at https://api.middesk.com/v1.

Other comparisons with Jumio or Middesk

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.