# Shufti vs Veriff

> Veriff scores 61.1 (C) on agent readiness against Shufti's 57.8 (C), and leads in 4 of 7 scored categories. Both do kyc identity. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/shufti-vs-veriff
- Markdown: https://www.anchorterminal.com/compare/shufti-vs-veriff.md (~2,150 tokens)
- Slim: https://www.anchorterminal.com/compare/shufti-vs-veriff.min.md (~680 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/shufti-vs-veriff.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-09

Veriff scores 61.1 (C) on agent readiness against Shufti's 57.8 (C), and leads in 4 of 7 scored categories. Both do kyc identity.

- Shufti: grade C, 57.8/100, rank #538 of 842. Markdown https://www.anchorterminal.com/tools/shufti.md · JSON https://www.anchorterminal.com/api/v1/tools/shufti.json
- Veriff: grade C, 61.1/100, rank #436 of 842. Markdown https://www.anchorterminal.com/tools/veriff.md · JSON https://www.anchorterminal.com/api/v1/tools/veriff.json

## Which one, for what

### Shufti (C)

Good for: A team that wants document, face, address, AML and KYB checks behind one endpoint, a free plan for low volume, and an MCP server that hands the person a hosted verification link.

Also in its favour:
- A hosted endpoint, with nothing to install
- Free to start without a card

Watch for: No OpenAPI file or other machine-readable contract was found. The reference is prose tables plus Postman collections

### Veriff (C)

Good for: A team that needs document and selfie verification with public per-verification prices and a trial, and that can run a webhook receiver and HMAC signing.

Ahead on:
- Schema & documentation, 82 against 58
- Payments & pricing, 40 against 35

Watch for: No server-side SDK and no MCP server. Official packages cover only browser and mobile capture


## Score by category

| Category | Weight | Shufti | Veriff | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 65 | 62 | Shufti +3 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 58 | 82 | Veriff +24 |
| Agent ergonomics | 13% (16.2 this run) | 47 | 43 | Shufti +4 |
| Security & auth | 14% (17.5 this run) | 62 | 63 | Veriff +1 |
| Payments & pricing | 10% (12.5 this run) | 35 | 40 | Veriff +5 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 72 | 74 | Veriff +2 |
| Transparency & trust | 7% (8.8 this run) | 71 | 67 | Shufti +4 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **57.8 · C** | **61.1 · C** | |

## Facts side by side

| Fact | Shufti | Veriff |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Shufti Pro Limited | Veriff OÜ |
| Hosted endpoint | `https://api.shuftipro.com` | no (local only) |
| Transports | HTTP, Streamable HTTP | HTTP |
| Auth | OAuth or key | API key |
| Pricing | Freemium | Pay per use |
| x402 | no | no |
| Licence | Proprietary service under Shufti's Terms and Conditions. The licences of the mobile capture SDKs were not checked | Proprietary service. The npm capture SDKs are ISC (@veriff/js-sdk, @veriff/incontext-sdk) and MIT (@veriff/react-native-sdk) |
| Tools exposed | 25 | none |
| Read-only variant documented | no | no |
| llms.txt | yes | yes |
| Last release | 2026-10-06 | 2026-10-02 |
| Terms last updated |  | couldn't be read |
| Privacy policy last updated | 2026-09-01 | 2026-04-16 |
| Customer content may train models | yes, with an opt-out | yes |
| Terms restrict automated access |  | couldn't be read |
| Terms restrict benchmarking |  | couldn't be read |
| Terms or service can change without notice |  | couldn't be read |
| Arbitration or class-action waiver |  | couldn't be read |
| Popularity | 673 npm/wk | 32 stars, 110k npm/wk |

## Verdicts

**Shufti.** One endpoint covers document, face, address, AML and KYB checks, with a free plan of 10 verifications a month, and a hosted MCP server adds OAuth with three scopes. No OpenAPI file, server SDK or idempotency key was found, and the status page history could not be read.

**Veriff.** Per-verification prices are public from $0.80, with a 15-day trial of 50 sessions and no card. Each endpoint page is Markdown with an OpenAPI 3.0 fragment. There is no server SDK, MCP server or idempotency key, most calls need an HMAC signature, and the status page shows nine incidents between 20 July and 7 October 2026.

## Before you call either

### Shufti

1. POST every verification to `https://api.shuftipro.com/` with a unique `reference` of 6 to 250 characters and one object per service. Read results from `/status` with that reference
2. Register the callback domain in the back office first. An unregistered `callback_url` is rejected
3. Stay under 60 requests a minute per IP on a production account and 20 on a trial account
4. Check the `Signature` response header. Accounts created after 15 March 2023 hash the Secret Key with SHA-256 before appending it to the raw response
5. Through MCP, identity checks return a `verification_url` for the person to open. No tool accepts an image, so use the REST API for offsite proofs

### Veriff

1. Take the base URL from the integration's API keys page. Send X-AUTH-CLIENT on every call and store verification.id from POST /v1/sessions
2. Sign POST and PATCH bodies, and the session ID on GET and DELETE, with HMAC-SHA256 in X-HMAC-SIGNATURE. POST /v1/sessions needs no signature
3. Stay under 30 session creations a minute on Self-Serve, 600 on Enterprise. A 429 carries code 1004
4. Don't blindly retry POST /v1/sessions. Each call makes a new session, which is billed on a live integration
5. Poll GET /v1/sessions/{id}/decision until `verification` is not null, or accept webhooks within 5 seconds and treat duplicates as normal

## Questions

### Which is better for AI agents, Shufti or Veriff?

Veriff scores 61.1 (C) on agent readiness against Shufti's 57.8 (C), and leads in 4 of 7 scored categories.

### Do Shufti and Veriff need an API key?

Shufti takes an API key or an OAuth sign-in. Veriff needs an API key.

### Can an agent call Shufti and Veriff without installing anything?

Shufti has a hosted endpoint at https://api.shuftipro.com. No hosted endpoint is listed for Veriff.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/shufti-vs-veriff.json, and with the fewest tokens: https://www.anchorterminal.com/compare/shufti-vs-veriff.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "shufti", "b": "veriff"}`. From a terminal: `anchor compare shufti veriff`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/shufti.json and https://www.anchorterminal.com/api/v1/tools/veriff.json

## Other comparisons with Shufti or Veriff

- [ComplyCube vs Shufti](https://www.anchorterminal.com/compare/complycube-vs-shufti.md)
- [ComplyCube vs Veriff](https://www.anchorterminal.com/compare/complycube-vs-veriff.md)
- [Didit vs Shufti](https://www.anchorterminal.com/compare/didit-vs-shufti.md)
- [Didit vs Veriff](https://www.anchorterminal.com/compare/didit-vs-veriff.md)
- [Jumio vs Shufti](https://www.anchorterminal.com/compare/jumio-vs-shufti.md)
- [Jumio vs Veriff](https://www.anchorterminal.com/compare/jumio-vs-veriff.md)
- [Middesk vs Veriff](https://www.anchorterminal.com/compare/middesk-vs-veriff.md)
- [Persona vs Shufti](https://www.anchorterminal.com/compare/persona-vs-shufti.md)
- [Persona vs Veriff](https://www.anchorterminal.com/compare/persona-vs-veriff.md)
- [Shufti vs Socure RiskOS](https://www.anchorterminal.com/compare/shufti-vs-socure-riskos.md)
- [Shufti vs Sumsub](https://www.anchorterminal.com/compare/shufti-vs-sumsub.md)
- [Shufti vs Trulioo](https://www.anchorterminal.com/compare/shufti-vs-trulioo.md)
- [Socure RiskOS vs Veriff](https://www.anchorterminal.com/compare/socure-riskos-vs-veriff.md)
- [Sumsub vs Veriff](https://www.anchorterminal.com/compare/sumsub-vs-veriff.md)
- [Trulioo vs Veriff](https://www.anchorterminal.com/compare/trulioo-vs-veriff.md)
- [ComplyAdvantage vs Shufti](https://www.anchorterminal.com/compare/complyadvantage-vs-shufti.md)
- [ComplyAdvantage vs Veriff](https://www.anchorterminal.com/compare/complyadvantage-vs-veriff.md)
- [Middesk vs Shufti](https://www.anchorterminal.com/compare/middesk-vs-shufti.md)