Developers / Specs and reference

Identity verification, one API call away

The IDV API (AAMVA+) ships an OpenAPI specification you can read in the browser or pull as YAML for your own tooling.

IDV API (AAMVA+)

Document identity verification

Confirm a real person behind a government ID at onboarding or step-up. Pairs identity proofing evidence with the document check, so the decision rests on the record.

Formats: HTML reference & OpenAPI YAML
Auth: API key over HTTPS
Base: authcloud.trusona.net

HTML IDV API Reference YAML IDV API OpenAPI (YAML)

Two flavors

Pick the integration that matches your workflow

Both run on the same verification engine. The difference is what you send with the person's details: their documents, or a phone number.

NIST 800-63 defines three identity assurance levels. Our post on identity proofing explains them in plain English.

AAMVA+

IDV API AAMVA+

You provide: your documents + data

Keep the workflow you already have. Send us the documents and data you collect today, and get the verification results back through a single API.

Learn more

MNO+

IDV API MNO+

You provide: a phone number

Handle requests with a phone number and the person's details. Numbers in the US, Canada and the UK work by default. One SMS message and you are done.

Learn more

What's inside

What the IDV API does

Verification

Verify against the source

ID verification through AAMVA's Driver's License Data Verification (DLDV) service
Cut synthetic ID fraud by verifying identity with a U.S. driver's license
Meet eKYC compliance by verifying customer identity during onboarding

Scanning

Scan documents in person or remotely

ID proofing with government-issued IDs, in person or remote
Support for U.S. driver's license, permit, or ID card
Reads the license's machine-readable PDF417 barcode
Scan in your own app or in the mobile browser
Validates up to 17 fields on the license, including name and issue date

Security

Security and privacy

Patented Anti-Replay detects session replay attacks
Data encrypted at rest and in transit
No PII stored

Developers

REST API, samples and test data

REST-based APIs your developers already know how to use
Code samples to start from
Test data and cURL scripts to try calls before you go live

Where it fits

Common use cases

Add verification at any step where you need to confirm who is on the other end.

New account opening Minimum age requirements Account lockout reset High-value transactions Credit approval Step-up authentication

Questions buyers ask

What teams ask before they build

What is an identity verification API?

An interface your systems call to confirm a person is who they claim to be. Trusona's API checks the government ID against the authority that issued it. In the US that is the state DMV, over the AAMVA network.

Which identity verification API works for an IT help desk?

One that works without prior enrollment. Trusona verifies the first call someone ever makes, including a new hire or a contractor who never registered. The ATO Protect Suite API adds SIM swap, man-in-the-middle and anti-replay checks for the phone channel.

Does the IDV API (AAMVA+) run a selfie or liveness check?

No. It verifies the document against the issuing authority instead of matching a face. Generative AI can defeat selfie and liveness tests, so Trusona does not rely on them.

What is the difference between the IDV API (AAMVA+) and the ATO Protect Suite API?

The IDV API (AAMVA+) runs a reduced set of risk checks. The Suite API runs all of them, plus Anti-Replay, MITM detection and a SIM swap check, and handles document scanning for you.

See it running against your stack

A 30-minute conversation is usually enough to map the right flavor to your workflow.