Developer quickstart

Base path: /api/v1 · Auth: Bearer crv_test_... or crv_live_...

1. Create application — Sign in → Dashboard bootstraps org + sandbox key.
2. Generate API key — Store secret server-side only.
3. Create workflow — Default KYC workflow is published automatically (GET /api/v1/workflows).
4. Create session

   curl -X POST /api/v1/sessions \
     -H "Authorization: Bearer crv_test_..." \
     -H "Content-Type: application/json" \
     -d '{"type":"KYC","external_user_id":"user_123"}'

5. Redirect user to verification_url (/verify/session/:id).
6. Receive webhook — verify X-Cryptorafts-Signature (HMAC-SHA256 of timestamp.body).
7. Retrieve result — GET /api/v1/sessions/:id
8. Issue credential — POST /api/v1/credentials
9. Generate proof — POST /api/v1/proofs (sandbox; production_safe: false)
10. On-chain attestation — deferred; contracts will be added later.

Endpoints

• POST /api/v1/sessions
• GET /api/v1/sessions/:id
• POST /api/v1/kyc
• POST /api/v1/kyb
• POST /api/v1/aml/screen
• POST /api/v1/poa
• POST /api/v1/liveness
• POST /api/v1/face-match
• POST /api/v1/wallets/screen
• POST /api/v1/transactions/screen
• GET /api/v1/risk/:id
• POST /api/v1/credentials
• POST /api/v1/proofs
• POST /api/v1/webhooks/test
• GET /api/v1/usage
• GET /api/v1/workflows