# Entrust Identity Verification (formerly Onfido) (slim)

> Entrust Identity Verification, formerly Onfido, checks identity documents, selfies and liveness, runs watchlist and database checks and orchestrates them in Workflow Studio. Agents use the Onfido Public API v3.6 in EU, US and CA regions.

- Full: https://www.anchorterminal.com/tools/entrust-identity-verification.md (~6,750 tokens) · this version ~1,680 tokens · JSON https://www.anchorterminal.com/tools/entrust-identity-verification.json · canonical https://www.anchorterminal.com/tools/entrust-identity-verification
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-14

**B · 62.1/100 · rank #472 of 1076 · #8 in Identity & business verification · not agent-ready · confidence medium**


Assessment: The v3.6 API has a public MIT OpenAPI file, server libraries in five languages, OAuth client credentials with scopes and an 18-month deprecation notice. Entrust's own site answered 403, so terms, privacy notice, pricing and security.txt weren't read. There is no idempotency key, and live tokens need a Dashboard account with billing details.

## Facts

- Kind: HTTP API · vendor: Onfido Ltd (Entrust) · category: Identity & business verification · legal entity: Onfido Ltd · provenance 87/100
- Local only (HTTP): npm `@onfido/api`, pypi `onfido-python`
- Auth: OAuth or key · pricing: Paid · x402: no · licence: Proprietary service under Entrust's terms. The OpenAPI spec and the server libraries (onfido-java, onfido-node, onfido-php, onfido-python, onfido-ruby) are MIT
- Probe metrics: not measured yet (probes haven't run)
- Surface graded: Onfido Public API v3.6 (REST over HTTPS) and its OpenAPI file. No official MCP server found
- Regions: https://api.eu.onfido.com, https://api.us.onfido.com, https://api.ca.onfido.com, no default region in v3.6. EU data stored in Ireland with backup in Germany
- Resources: Applicants, documents, live photos and videos, motion captures, checks, reports, workflow runs and tasks, watchlist monitors, webhooks, SDK tokens, biometric tokens, passkeys, electronic signatures, results feedback
- Credentials: API tokens per region and environment, or OAuth client credentials with scopes and IP allowlist (v3.6). SDK tokens scoped to one workflow run
- Rate limits: Live 400 requests a minute (7 a second, burst 14), sandbox 120 a minute (2 a second, burst 4), token bucket. 429 `rate_limit`
- Pagination: `page` and `per_page` (applicants up to 500, default 20), workflow runs fixed at 20 with status, tag, date and applicant filters, Link and X-Total-Count headers
- Errors: `error` object with `type`, `message` and `fields`, codes such as validation_error, expired_token, trial_limits_reached, geoblocked_request, rate_limit
- Webhooks: HMAC-SHA256 in `X-SHA2-Signature`, 20x expected within 10 seconds, five retries over 10 hours, resend for 30 days, at-least-once and unordered
- Sandbox: Same endpoints as live with predetermined results, not charged, not sent to third parties. Applicant emails are still sent
- Retention: Deleting an applicant queues it and its data for deletion after a delay set through client support, at least 30 days recommended, restorable until then
- Libraries: onfido-java, onfido-node (@onfido/api), onfido-php, onfido-python, onfido-ruby, 6.2.0, generated from the spec with webhook verification
- Status: status.onfido.com on Statuspage, components per region for API, Dashboard, Document Verification, Facial Similarity, Watchlist, Webhooks, Known Faces and others
- Certifications: ISO/IEC 27001 and SOC 2 Type II per the G-Cloud 14 listing. Entrust's own security pages unread (403)

- Scores: Reliability 70, Performance pending, Schema & documentation 84, Agent ergonomics 65, Security & auth 58, Payments & pricing 20, Task success pending, Maintenance & community 58, Transparency & trust 70 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines and scored on the Public API v3.6. status.onfido.com is a Statuspage with API, Dashboard, Document Verification… · Schema & documentation, Public OpenAPI 3.0 file for v3.6 in github.com/onfido/onfido-openapi-spec, MIT, with 64 paths and 85 operations (25). · Agent ergonomics, No field selection. · Security & auth, Two credential types. · Payments & pricing, Read with the hosted rubric. · Maintenance & community, The spec repository was refreshed on 31 August 2026 and tagged v6.2.0. The npm `@onfido/api` 6.2.0 and PyPI `onfido-python` 6.2.0 date from… · Transparency & trust, The OpenAPI spec and the server libraries are MIT.
- Sources: 15, open questions: 6, both in the full twin
- Capabilities: kyc.identity, kyc.documents, kyc.screening
- JSON: https://www.anchorterminal.com/api/v1/tools/entrust-identity-verification.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/entrust-identity-verification.svg` or a link to https://www.anchorterminal.com/tools/entrust-identity-verification from a page on onfido.com or entrust.com or one of their subdomains, or the README of github.com/onfido/onfido-openapi-spec, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Use the regional host for the account (api.eu, api.us or api.ca.onfido.com/v3.6). v3.6 has no default region
2. Prefer an OAuth client with only the scopes the task needs over a live API token, and refresh the 60-minute access token
3. Stay under 400 requests a minute live and 120 in sandbox, and back off on a 429 `rate_limit` error
4. Check before retrying a POST. There is no idempotency key, so a retry can create a second applicant or check
5. Treat webhook events as duplicates or out of order, and verify `X-SHA2-Signature` over the raw body

## Connect

```bash
pip install onfido-python
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/entrust-identity-verification

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Didit | BB | 75 | kyc.identity, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/didit.min.md |
| Persona | B | 69.5 | kyc.identity, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/persona.min.md |
| Sumsub | B | 68.5 | kyc.identity, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/sumsub.min.md |
| Plaid Identity Verification | B | 67.1 | kyc.identity, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/plaid-identity-verification.min.md |
| ComplyCube | B | 63.7 | kyc.identity, kyc.documents, kyc.screening | https://www.anchorterminal.com/tools/complycube.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)