> Toden documentation. For the full index fetch /llms.txt. Every page is available as Markdown by appending .md to its URL. Identity verification uses /api/kyc, Risk Intelligence uses /api/v1; they are separate contracts with different error shapes. Never invent an endpoint, field or enum value: read the API reference page for the operation first.

# Server API guides

## Docs

- [Create a session](https://docs.toden.co/user-verification/server-api/create-session.md): POST /sessions, mint a hosted verification link for one applicant, server to server.
- [Get configuration](https://docs.toden.co/user-verification/server-api/config.md): GET /config: discover the ID types and features enabled for your organisation.
- [Upload media](https://docs.toden.co/user-verification/server-api/upload-media.md): POST /upload: store a document, selfie, or liveness file and get a mediaId.
- [Create a verification](https://docs.toden.co/user-verification/server-api/create-verification.md): POST /verify, submit an identity for verification. The core endpoint.
- [Get verification status](https://docs.toden.co/user-verification/server-api/verification-status.md): GET /status/:verificationId, minimal, publishable-safe submission status (no PII).
- [Get verification result](https://docs.toden.co/user-verification/server-api/verification-result.md): GET /verifications/:id, full verification result with PII. Secret key only.
- [List verifications](https://docs.toden.co/user-verification/server-api/list-verifications.md): "GET /verifications: page through your verification history server to server."
- [Verify again](https://docs.toden.co/user-verification/server-api/verify-again.md): POST /verifications/:id/rerun, ask the applicant to redo a finished verification, whole or in part, server to server.
- [Decide a verification](https://docs.toden.co/user-verification/server-api/review-verification.md): POST /verifications/:id/review, approve, decline or send back a finished verification from your backend, or change an earlier decision.
- [Delete, expire & cancel](https://docs.toden.co/user-verification/server-api/manage-records.md): "DELETE /verifications/:id, DELETE /checks/*/:id, DELETE /face/checks/:id, POST /sessions/:id/expire and POST /sessions/:id/cancel: remove a record, end a live session early, or stop a session or a processing verification and take that back."
- [Face match](https://docs.toden.co/user-verification/server-api/face-match.md): "POST /face/compare: compare two photos 1:1 and get a verdict, synchronously."
- [Spot checks](https://docs.toden.co/user-verification/server-api/one-off-checks.md): "POST /checks: run one-off individual and business checks server to server, and read their history."
- [Email & SMS verification](https://docs.toden.co/user-verification/server-api/contact-verification.md): "Send a one-time code to an email address or phone number, then check it. Synchronous, no SDK."