Online safety, without the friction.

const API = "https://trustapi********/api/v1.0/external";
const clientID = "your-client-id-here";
const clientSecret = "your-client-secret-here";

// 1 · Authenticate from your backend, never the browser
const { access_token } = await fetch(`${API}/auth`, {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ clientID, clientSecret })
}).then(r => r.json());

// 2 · Start a Verify Now session, pick the methods + minimum age
const ageDetails = {
  version: "1.0",
  requiredAge: 18,
  ageAssuranceProducts: ["ageFaceEstimation", "digitalId", "openBanking"]
};

const { resultId, link } = await fetch(`${API}/verify-now/redirect`, {
  method: "POST",
  headers: { Authorization: `Bearer ${access_token}`, "Content-Type": "application/json" },
  body: JSON.stringify({ ageDetails, redirectUrl: "https://your.site/age/return" })
}).then(r => r.json());
// → send the user to `link`; they verify; you return to redirectUrl

// 3 · Retrieve the signed, anonymous result
const { result, signature } = await fetch(`${API}/result/${clientID}/${resultId}`,
  { headers: { Authorization: `Bearer ${access_token}` } }
).then(r => r.json());

if (result.verified) grantAccess();   // true / false, no DOB, no PII, nothing retained

import requests

API = "https://trustapi********/api/v1.0/external"
client_id = "your-client-id-here"
client_secret = "your-client-secret-here"

# 1 · Authenticate from your backend, never the browser
auth = requests.post(f"{API}/auth", json={
    "clientID": client_id,
    "clientSecret": client_secret,
}).json()
token = auth["access_token"]

# 2 · Start a Verify Now session, pick the methods + minimum age
age_details = {
    "version": "1.0",
    "requiredAge": 18,
    "ageAssuranceProducts": ["ageFaceEstimation", "digitalId", "openBanking"],
}

session = requests.post(f"{API}/verify-now/redirect",
    headers={"Authorization": f"Bearer {token}"},
    json={"ageDetails": age_details, "redirectUrl": "https://your.site/age/return"},
).json()
# → send the user to session["link"]; they verify; you return to redirectUrl

# 3 · Retrieve the signed, anonymous result
res = requests.get(f"{API}/result/{client_id}/{session['resultId']}",
    headers={"Authorization": f"Bearer {token}"}).json()

if res["result"]["verified"]:   # True / False, no DOB, no PII, nothing retained
    grant_access()

using System.Net.Http.Json;
using System.Text.Json.Serialization;
using var http = new HttpClient { BaseAddress = new("https://trustapi********/api/v1.0/external/") };
var yourClientId = "your-client-id-here";
var yourClientSecret = "your-client-secret-here";

// 1 · Authenticate from your backend, never the browser
var authResponse = await http.PostAsJsonAsync("auth",
    new
    {
        clientID = yourClientId,
        clientSecret = yourClientSecret
    }
);
var authResponseContent = await authResponse.Content.ReadFromJsonAsync<TrustAuthResponse>();
http.DefaultRequestHeaders.Authorization = new("Bearer", authResponseContent.access_token);

// 2 · Start a Verify Now session, pick the methods + minimum age
var ageDetails = new
{
    version = "1.0",
    requiredAge = 18,
    ageAssuranceProducts = new[] { "ageFaceEstimation", "digitalId", "openBanking" }
};

var newSessionResponse = await http.PostAsJsonAsync("verify-now/redirect",
    new {
        ageDetails,
        redirectUrl = "https://your.site/age/return"
    }
);
var redirectSessionContent = await newSessionResponse.Content.ReadFromJsonAsync<RedirectUrlResponse>();

// → send the user to session.link; they verify; you return to redirectUrl

// 3 · Retrieve the signed, anonymous result
var result = await http.GetFromJsonAsync<AgeResult>($"result/{yourClientId}/{redirectSessionContent.ResultId}");

# 1 · Authenticate (server-side) → returns a 20-minute Bearer JWT
curl -X POST https://trustapi********/api/v1.0/external/auth \
  -H "Content-Type: application/json" \
  -d '{"clientID":"your-client-id-here","clientSecret":"your-client-secret-here"}'

# 2 · Start a Verify Now session with your methods + minimum age
curl -X POST https://trustapi********/api/v1.0/external/verify-now/redirect \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"ageDetails":{"version":"1.0","requiredAge":18,"ageAssuranceProducts":["ageFaceEstimation","digitalId","openBanking"]},"redirectUrl":"https://your.site/age/return"}'

# 3 · Retrieve the signed result once the user has finished
curl https://trustapi********/api/v1.0/external/result/$CLIENT_ID/$RESULT_ID \
  -H "Authorization: Bearer $TOKEN"
# → { "product": "age_assurance", "result": { "verified": true }, "signature": "…" }