Skip to main content
POST
Challenge a subject
The server records that a subject needs a challenge and returns challenge_required. It does not collect identity evidence or send a challenge automatically. Route the subject through the verification process you implement and retain the decision identifier.

Authorizations

X-API-Key
string
header
required

API key for machine-to-machine authentication

Body

application/json
subject_id
string
required
Minimum string length: 1
reason
string
required
Minimum string length: 10
subject_type
string
default:user
risk_score
integer
Required range: 0 <= x <= 100

Response

Current workspace result

decision_id
string<uuid>
subject_id
string
action
enum<string>
Available options:
challenge
created_at
string<date-time>
challenge_required
boolean