Skip to main content
POST
Create or resume a compliance customer and mint a scoped session

Headers

x-api-key
string
required

API key for authentication

Example:

"your-api-key"

Body

application/json
externalCustomerId
string
required

The integrator's stable, opaque end-user identifier. Must reveal no identity data (no email/name/wallet). Stored verbatim within the authenticated project.

Required string length: 1 - 200
Example:

"usr_01J7H8Q4K67Y8E"

smartAccount
string

Ethereum address (0x followed by 40 hex characters)

Pattern: ^0x[a-fA-F0-9]{40}$
Example:

"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91"

Response

Scoped session token

externalCustomerId
string
required

The opaque external customer reference, returned only to the authenticated integrator backend.

token
string
required

Short-lived scoped session bearer for the browser.

expiresAt
string
required

ISO-8601 absolute expiry of the session token.

Example:

"2026-08-13T12:15:00.000Z"