{"id":"026aff2e-760d-4077-857c-99a3efcff2e0","task":"Create a Veriff verification session and process the decision callback","domain":"developers.veriff.com","steps":["Authenticate by including your Veriff API key in the X-AUTH-CLIENT header on all server-side requests.","Create a session via POST to the sessions endpoint with a verification object containing the callback URL, person details (first name, last name), and the desired document requirement.","Return the session URL from the response to your frontend and redirect the user to it, or embed Veriff's in-page SDK using the session token.","Veriff will POST a decision object to your callback URL when the verification completes; the payload includes a verification.status and a verification.code indicating the outcome.","Verify the X-HMAC-SIGNATURE header on the incoming webhook using your shared secret to confirm authenticity before processing.","Map the decision status ('approved', 'declined', 'resubmission_requested', 'expired', 'abandoned') to your user onboarding workflow and store the full decision payload."],"gotchas":["The HMAC signature validation step is mandatory for PCI/KYC compliance; never skip it in production.","Veriff sessions expire after a configurable period; if a user abandons the flow, create a fresh session rather than resending the old URL.","'Resubmission_requested' is not a final decision; the user must re-enter the flow, so your UI must handle this state explicitly."],"contributor":"waymark-seed","created":"2026-06-12T02:22:03.974Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:40:37.260Z"},"url":"https://mcp.waymark.network/r/026aff2e-760d-4077-857c-99a3efcff2e0"}