> Toden documentation. For the full index fetch /llms.txt. Every page is available as Markdown by appending .md to its URL. Identity verification uses /api/kyc, Risk Intelligence uses /api/v1; they are separate contracts with different error shapes. Never invent an endpoint, field or enum value: read the API reference page for the operation first.

# Get configuration

> GET /config: discover the ID types and features enabled for your organisation.

```
GET /api/kyc/config
```

Returns the ID types enabled for your organisation in the current environment, along with the features available for each. Call this on startup to drive which ID options you present to users and which capture steps you run.

**Authentication:** `Authorization: Bearer pk_…` (required).

## Request

```bash
curl "https://api.toden.co/api/kyc/config" \
  -H "Authorization: Bearer $TODEN_KEY"
```

## Response `200 OK`

```json
{
  "environment": "PRODUCTION",
  "idTypes": [
    {
      "country": "NG",
      "idType": "bvn",
      "features": {
        "documentVerification": false,
        "livenessCheck": true,
        "govDbCheck": true
      }
    },
    {
      "country": "NG",
      "idType": "drivers-license",
      "features": {
        "documentVerification": true,
        "livenessCheck": true,
        "govDbCheck": true
      }
    }
  ],
  "branding": {
    "companyName": "Acme Inc.",
    "logo": "https://api.toden.co/api/kyc/branding/logo/ast_123",
    "primaryColor": "#5645F5"
  }
}
```

### Fields

| Field                                     | Type    | Description                                                                                                                                                                                 |
| ----------------------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `environment`                             | string  | `SANDBOX` or `PRODUCTION`, derived from your API key.                                                                                                                                       |
| `idTypes[]`                               | array   | The ID types enabled for your org. Disabled ones are omitted entirely.                                                                                                                      |
| `idTypes[].country`                       | string  | ISO-3166 alpha-2 country code: a government-database market (`NG`, `GH`, `KE`, `ZA`, `CI`) or any country enabled for [global document verification](/user-verification/concepts/id-types). |
| `idTypes[].idType`                        | string  | The ID type identifier to send to [`POST /verify`](/user-verification/server-api/create-verification).                                                                                      |
| `idTypes[].features.documentVerification` | boolean | Whether document image capture is enabled for this ID type.                                                                                                                                 |
| `idTypes[].features.livenessCheck`        | boolean | Whether a liveness/selfie step is enabled.                                                                                                                                                  |
| `idTypes[].features.govDbCheck`           | boolean | Whether the ID is checked against the government database.                                                                                                                                  |
| `branding`                                | object  | Your organisation's branding, set under **Settings → Organization**. May be omitted if nothing is configured.                                                                               |
| `branding.companyName`                    | string  | Your organisation's display name.                                                                                                                                                           |
| `branding.logo`                           | string  | Absolute, public URL of your org logo. The [SDKs](/integrate/sdks/overview) render this when `appearance.logo` is set to `'default'`. Omitted if no logo is uploaded.                       |
| `branding.primaryColor`                   | string  | Your org's brand colour (hex), if set.                                                                                                                                                      |

Only enabled ID types are returned. If an ID type you expect is missing, enable it under **Settings → Organization → ID Types** (or ask Toden to enable it for your account).

See [Countries & ID types](/user-verification/concepts/id-types) for the catalogue of supported values.