Write a review

Head to head · Identity verification · October 2026 research run

Shufti vs Stripe Identity

Stripe Identity scores 77.7 (BB) on agent readiness against Shufti's 57.8 (C), and leads in 6 of 7 scored categories. Both do identity verification.

Best identity and business verification APIs for AI agents · All 119 verification comparisons

ShuftiShufti Pro Limited · HTTP API C57.8/100#631 of 1076 Stripe IdentityStripe, LLC · HTTP API BB77.7/100#21 of 1076

Which one, for what

Shufti C

Best for A team that wants document, face, address, AML and KYB checks behind one endpoint, a free plan for low volume, and an MCP server that hands the person a hosted verification link.

Also in its favour

  • A hosted endpoint, with nothing to install
  • Free to start without a card

Watch for

No OpenAPI file or other machine-readable contract was found. The reference is prose tables plus Postman collections

Stripe Identity BB

Best for A business already on Stripe that needs document and selfie checks or US SSN validation with published prices.

Ahead on

  • Schema & documentation, 94 against 58
  • Agent ergonomics, 93 against 47
  • Security & auth, 86 against 62
  • Payments & pricing, 40 against 35
  • Maintenance & community, 85 against 72
  • Transparency & trust, 85 against 71

Also in its favour

  • Agent-ready, a grade of BB or better

Watch for

Document, selfie and US SSN checks only. No sanctions or watchlist screening and no business verification

Score by category

CategoryWeight this runShuftiStripe IdentityEdge
Reliability16%206562Shufti +3
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.25894Stripe Identity +36
Agent ergonomics13%16.24793Stripe Identity +46
Security & auth14%17.56286Stripe Identity +24
Payments & pricing10%12.53540Stripe Identity +5
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87285Stripe Identity +13
Transparency & trust7%8.87185Stripe Identity +14
Negative events≤1500
TotalC 57.8/100BB 77.7/100

Facts side by side

FactShuftiStripe Identity
KindHTTP APIHTTP API
VendorShufti Pro LimitedStripe, LLC
Hosted endpointhttps://api.shuftipro.comno (local only)
TransportsHTTP, Streamable HTTPHTTP
AuthOAuth or keyAPI key
PricingFreemiumPay per use
x402nono
LicenceProprietary service under Shufti's Terms and Conditions. The licences of the mobile capture SDKs were not checkedProprietary service under the Stripe Services Agreement and Stripe Identity Terms. The OpenAPI spec and official SDKs are MIT
Tools exposed25none
Read-only variant documentednono
llms.txtyesyes
Last release2026-10-062026-10-01
Terms last updated2026-09-28
Privacy policy last updated2026-09-012026-04-28
Customer content may train modelsyes, with an opt-outyes
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingnot found in the text
Terms or service can change without noticenot found in the text
Arbitration or class-action waivernot found in the text
Popularity673 npm/wk24.2M npm/wk, 11.4M PyPI/wk

Verdicts

Shufti

One endpoint covers document, face, address, AML and KYB checks, with a free plan of 10 verifications a month, and a hosted MCP server adds OAuth with three scopes. No OpenAPI file, server SDK or idempotency key was found, and the status page history could not be read.

Stripe Identity

Stripe Identity runs on the Stripe API, with a public OpenAPI spec, idempotency keys, restricted keys for sensitive fields and a redact endpoint. The product page lists £1.25 per document and selfie check, and the first 50 are free. It has no watchlist or business screening, and outside GB, JP and the US it is in public beta.

Before you call either

Shufti

  1. POST every verification to https://api.shuftipro.com/ with a unique reference of 6 to 250 characters and one object per service. Read results from /status with that reference
  2. Register the callback domain in the back office first. An unregistered callback_url is rejected
  3. Stay under 60 requests a minute per IP on a production account and 20 on a trial account
  4. Check the Signature response header. Accounts created after 15 March 2023 hash the Secret Key with SHA-256 before appending it to the raw response
  5. Through MCP, identity checks return a verification_url for the person to open. No tool accepts an image, so use the REST API for offsite proofs

Stripe Identity

  1. Send an Idempotency-Key based on your user reference when creating a VerificationSession, so a retry doesn't make a second session
  2. Send the end user the session URL or client secret. The person completes the check, the agent can't. Links expire after 48 hours
  3. Use a restricted key for verified_outputs.dob and id_number. Without an IP restriction it reads them only for 48 hours
  4. Wait for identity.verification_session.verified or requires_input webhooks instead of polling
  5. Treat redact as irreversible, and don't put personal data in metadata

Questions

Which is better for AI agents, Shufti or Stripe Identity?

Stripe Identity scores 77.7 (BB) on agent readiness against Shufti's 57.8 (C), and leads in 6 of 7 scored categories.

Do Shufti and Stripe Identity need an API key?

Shufti takes an API key or an OAuth sign-in. Stripe Identity needs an API key.

Can an agent call Shufti and Stripe Identity without installing anything?

Shufti has a hosted endpoint at https://api.shuftipro.com. No hosted endpoint is listed for Stripe Identity.

Other comparisons with Shufti or Stripe Identity

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report