# ComplyCube (slim)

> ComplyCube verifies people from identity documents and a liveness check, screens people and companies against sanctions, PEP and adverse media lists, and runs address and bureau checks. Agents reach it through a REST API with separate test and live keys.

- Full: https://www.anchorterminal.com/tools/complycube.md (~8,000 tokens) · this version ~1,980 tokens · JSON https://www.anchorterminal.com/tools/complycube.json · canonical https://www.anchorterminal.com/tools/complycube
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**B · 63.7/100 · rank #299 of 722 · #4 in Identity & business verification · not agent-ready · confidence medium**


Assessment: A sandbox with its own key and scripted outcomes, a public OpenAPI spec, Markdown docs and an audit log API suit an agent running verification checks. Each environment has one unscoped key, no idempotency keys were found, and the only published terms are undated and read as website terms.

## Facts

- Kind: HTTP API · vendor: ComplyCube (Teemo Technology Ltd) · category: Identity & business verification · legal entity: Teemo Technology Ltd · provenance 82/100
- Endpoint: `https://api.complycube.com` (HTTP)
- Auth: API key · pricing: Pay per use · x402: no · licence: Proprietary service under ComplyCube's terms of service. The PHP library and the web, iOS and Android SDK repositories are MIT, and `@complycube/api` on npm is MIT
- Probe metrics: not measured yet (probes haven't run)
- API: REST at https://api.complycube.com/v1 for both test and live keys. OpenAPI 3.0.0, version 1.7.3, with 52 operations on 35 paths (28 GET, 17 POST, 7 DELETE). Updates are sent as POST to the resource
- Check types: standard_screening_check, extensive_screening_check, document_check, identity_check, enhanced_identity_check, proof_of_address_check, multi_bureau_check, eid_check, ssn_check, age_estimation_check, identity_fraud_check, driving_license_check, and device, email and mobile intelligence and face authentication checks
- Credentials: One test key (`test_`) and one live key (`live_`) per account in the `Authorization` header, rotated in the Web Portal. No scopes. IP whitelisting is listed in the plan table. SDK tokens from `POST /v1/tokens` for client-side SDKs
- Rate limits: 10 requests a second live, 5 in the sandbox. Monthly check quota of 1,000 on Starter and 8,000 on Core, and both limits answer 429
- Errors: JSON with `type`, `message` and `param`. 400, 401, 402 (credit plans), 403, 404, 413, 422 with 29 named processing errors, 429 and 500. No Retry-After documented
- Paging and filters: `page` and `pageSize` (1 to 1,000, default 100) with createdAfter, createdBefore, updatedAfter and updatedBefore on every list, plus attribute filters joined by AND. A badly formed filter returns 200 with no results
- Sandbox: Separate test key on the same host. All checks return dummy responses, with outcomes chosen by test data (last name attention or failed, middle name medium-risk or high-risk, OTP 123456). Sandbox data is deleted periodically
- Webhooks: Created in the portal or through `/v1/webhooks`. Events are signed with HMAC-SHA256 over the request body in the `ComplyCube-Signature` header. Duplicates and out-of-order delivery are possible
- Audit: `GET /v1/auditLogs` with team member, trigger, action and a diff of old and new values, across 17 resource types that include apiKeys and allowedIps
- Client libraries: Node.js `@complycube/api` 1.1.14 (15 April 2026), Python `complycube` 1.1.8 (8 December 2025), PHP `complycube/complycube-php` and .NET `Complycube`. Web, iOS, Android, React Native and Flutter SDKs for capture
- MCP: A documentation server at https://docs.complycube.com/documentation/~gitbook/mcp with no authentication. It searches and reads the docs and has no access to account data
- Status: status.complycube.com on Statuspage, with API, Web Portal, Hosted Solution and check-type components for Europe, US, Asia-Pacific and Middle East
- Certifications: ISO 27001:2022, SOC 2 Type II (Compliant), UK Cyber Essentials, ISO 9001:2015, UK DIATF and ISO 30107-3 testing per the docs compliance page. Evidence is in a trust centre that needs a browser
- Data handling: ComplyCube is processor for client data. Retention is 12 months on Starter and indefinite on Core and Growth per the plan table, with custom retention on higher plans. Residency in 12 locations, EU by default, hosted on AWS
- Prices: Starter plan $99 per month (plan); Core plan $299 per month (plan); Document verification check, Starter $1.05 per transaction; Standard AML screening, Starter $0.50 per transaction; Extensive AML screening, Starter $1.05 per transaction; Liveness and facial similarity check (photo), Starter $0.35 per transaction

- Scores: Reliability 84, Performance pending, Schema & documentation 78, Agent ergonomics 60, Security & auth 52, Payments & pricing 27, Task success pending, Maintenance & community 74, Transparency & trust 63 · total over the 7 assessed categories
- Why: Reliability, Graded on the REST API, hosted lines. · Schema & documentation, Public OpenAPI 3.0.0 spec, version 1.7.3, with 52 operations on 35 paths, linked from the integration page. · Agent ergonomics, `pageSize` from 1 to 1,000 (default 100) and omitted null properties size responses. · Security & auth, One test key and one live key per account, sent in the `Authorization` header, rotated from the Web Portal. · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, The changelog's latest entry is dated 6 October 2026 (30). · Transparency & trust, Closed service.
- Sources: 32, open questions: 8, both in the full twin
- Capabilities: kyc.identity, kyc.documents, kyc.screening, kyc.business
- JSON: https://www.anchorterminal.com/api/v1/tools/complycube.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/complycube.svg` or a link to https://www.anchorterminal.com/tools/complycube from a page on complycube.com or one of its subdomains, or the README of github.com/complycube/complycube-php, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Send the key bare in the `Authorization` header, with no Bearer prefix. Keys start `test_` or `live_`
2. Create a client first, then documents or live photos for it, then `POST /v1/checks` with the client and upload IDs
3. Stay under 10 requests a second live and 5 in the sandbox. On 429, back off exponentially with jitter, starting at 30 seconds
4. A badly formed filter returns 200 with no results, so check filter names before trusting an empty list
5. Checks are asynchronous. Subscribe to webhooks, verify the `ComplyCube-Signature` HMAC-SHA256 header, and expect duplicate and out-of-order events

## Connect

```bash
npm install --save @complycube/api
```

```bash
curl -X GET https://api.complycube.com/v1/clients \
     -H 'Authorization: <YOUR_API_KEY>'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/complycube

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Didit | BB | 75 | kyc.identity, kyc.documents, kyc.screening, kyc.business | https://www.anchorterminal.com/tools/didit.min.md |
| Persona | B | 69.5 | kyc.identity, kyc.business, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/persona.min.md |
| Sumsub | B | 68.5 | kyc.identity, kyc.business, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/sumsub.min.md |
| Trulioo | C | 58.2 | kyc.identity, kyc.business, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/trulioo.min.md |
| Grep AI | B | 64.4 | kyc.business, kyc.screening, kyc.documents | https://www.anchorterminal.com/tools/grep-ai.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)