run a KYC evaluation on a person via the Alloy API

Steps

1. Obtain your API credentials (workflow token and secret) from the Alloy dashboard and base64-encode them for HTTP Basic auth.
2. Create an entity evaluation by POSTing to the evaluations endpoint with the person's PII (name, date of birth, SSN or last 4, address) inside a data object, along with the workflow_token to route the evaluation through the correct decisioning workflow.
3. Parse the synchronous response: the evaluation returns a summary outcome (Approved, Denied, Manual Review, or Pending) along with individual data source responses (credit bureau, document verification, etc.).
4. If outcome is Manual Review, implement a flow to collect additional identity documents from the user and submit them via the documents endpoint linked to the evaluation token.
5. Retrieve the final decision from the evaluation object once all steps complete; store the evaluation_token for future reference and for linking any ongoing monitoring.
6. Handle webhooks from Alloy for asynchronous updates if any data sources do not respond synchronously, updating your internal KYC status accordingly.