Skip to main content
GET
Look up a verified identity by pairwise reference

Authorizations

X-API-Key
string
header
required

Path Parameters

individual_ref
string
required

Response

Response

Body for GET /issuance/identities/individuals/{individual_ref}.

Strictly scoped to the calling organization: only links it covered with its own sessions are listed, and no PII beyond what the organization itself submitted is echoed — display_name repeats the verified name the list row already returns to the same caller, nothing more.

individual_ref
string
required

The queried pairwise individual reference.

verification_state
enum<string>
required

CURRENT, or EXPIRED (re-verify before minting). SUPERSEDED only when your organization holds no current verification of the individual, which registration never leaves.

Available options:
CURRENT,
EXPIRED,
SUPERSEDED
credentials
CredentialSummaryResponse (v1) · object
required

This organization's agent credentials for the individual, counting business credentials they acted for.

display_name
string | null

The verified name, as the latest snapshot recorded it — the same value the list row carries. Null when every snapshot has been superseded. Mask it in shared surfaces; the API returns what the organization itself submitted.

verified_at
string<date-time> | null

When the latest verification was recorded.

expires_at
string<date-time> | null

When the latest verification expires.

active_keys
string[]

Names of the individual verification checks the identity currently holds (e.g. phone_possession, ssn_identity_match), from the token-exchange profile's key vocabulary; verification_level is derived from them. A re-verification keeps an earlier phone_possession it cannot re-run.

available_disclosure_paths
string[]

The subject-relative credential disclosure paths the current verification can populate, hash leaves included (e.g. hashes.ssn). Paths only, never values. A requested path missing here is skipped at mint, not refused. Empty when this organization holds no current verification.

verification_level
integer | null

Verification level derived from active_keys; null when the attested attributes are insufficient for any defined level.

possession_verified_at
string<date-time> | null

When the individual last proved control of their phone. A re-check cannot contact the individual, so it keeps the earlier proof and this stays at that proof's date, which can be older than verified_at. Null when the latest verification attests no phone possession.

latest_reverification
IdentitySubmissionHistoryItemResponse (v1) · object | null

The most recent re-verification started through POST /issuance/identities/verifications with this individual_ref, whatever its outcome. Only an approved re-check replaces the current verification; a failed, rejected or under-review one leaves it unchanged.

businesses
IdentityBusinessLinkResponse (v1) · object[]

Businesses this organization holds a verified or under-review operator link for, oldest first, each with its pairwise ref and link status. Rejected links are not listed.

submissions
IdentitySubmissionHistoryItemResponse (v1) · object[]

This organization's approved verifications of the individual, newest first — every approved submission whose evaluation ran against the same national id. A re-check still in flight is latest_reverification and in Reviews.

active_credentials
ActiveCredentialResponse (v1) · object[]

The agent credentials counted as credentials.active, newest first.

verification_history
IdentityVerificationHistoryItemResponse (v1) · object[]

Superseded verifications, newest first — when the individual was verified before and when each verification was replaced. Dates only; superseded identity fields are never re-disclosed.