Crivacy developer docs
FHE-powered KYC credentials, wired into your app in minutes.
Add a Verify with Crivacy button to your site. Users verify their identity once on our consent flow; every participating firm receives a signed, tamper-evident credential, no PII leaves Crivacy's boundary.
$ curl -X POST https://app.crivacy.io/api/v1/oauth/token \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "grant_type=authorization_code&code=..."
{
"access_token": "tok_…",
"id_token": "eyJhbGciOiJIUzI1Ni…",
"token_type": "Bearer",
"expires_in": 3600
}FHE-powered
Every credential is anchored on Sepolia for tamper evidence.
Verify once, reuse everywhere
The user runs KYC with Crivacy a single time and every partner firm can reuse it.
Standard OAuth 2.0 + OIDC
Authorization-code + PKCE. Works with any openid-client, authlib, or NextAuth setup.
Privacy-preserving claims
Firms receive verification flags + a proof hash, never the user's raw PII.
Real-time webhooks
11 signed event types so your back-office updates the moment a credential changes.
Start here
Four entry points, each curated for a different stage of integration.
Popular guides
The pages most integrators open first.
- Overview
Getting Started
Quick integration guide for the Crivacy KYC API
- Guides
OAuth / OIDC integration
Verify users via the Crivacy consent flow, the recommended integration path
- Guides
Authentication
API key management, scopes, and security best practices
- Guides
Credentials
Working with re-usable KYC credentials on Sepolia
- Guides
Webhooks
Real-time event delivery and signature verification
- API Reference
API Reference
Complete REST API documentation auto-generated from OpenAPI