# AnonAge

## Docs

- [Create an API key](https://docs.anonage.io/api-reference/api-keys/create-an-api-key.md): Mints a key for a verified BUSINESS account. The raw key and signing secret are returned **once**.
- [List API keys](https://docs.anonage.io/api-reference/api-keys/list-api-keys.md)
- [Revoke an API key](https://docs.anonage.io/api-reference/api-keys/revoke-an-api-key.md)
- [Confirm email change](https://docs.anonage.io/api-reference/auth/confirm-email-change.md): Completes a self-service email change started at `/api/users/change-email`.
- [Log in](https://docs.anonage.io/api-reference/auth/log-in.md)
- [Register](https://docs.anonage.io/api-reference/auth/register.md): Create a PERSONAL or BUSINESS account. `companyName` is required for BUSINESS.
- [Request password reset](https://docs.anonage.io/api-reference/auth/request-password-reset.md)
- [Resend verification email](https://docs.anonage.io/api-reference/auth/resend-verification-email.md)
- [Reset password](https://docs.anonage.io/api-reference/auth/reset-password.md)
- [Verify email](https://docs.anonage.io/api-reference/auth/verify-email.md)
- [Health check](https://docs.anonage.io/api-reference/health/health-check.md)
- [API Reference](https://docs.anonage.io/api-reference/introduction.md): Base URLs, response format, authentication, and conventions.
- [Create KYC applicant](https://docs.anonage.io/api-reference/kyc/create-kyc-applicant.md)
- [Create KYC check](https://docs.anonage.io/api-reference/kyc/create-kyc-check.md)
- [Get hosted verification link](https://docs.anonage.io/api-reference/kyc/get-hosted-verification-link.md): Creates a minimal applicant (external user id only — no name/DOB) and returns a Sumsub hosted verification URL to open in a new tab.
- [Get KYC status](https://docs.anonage.io/api-reference/kyc/get-kyc-status.md)
- [Get Sumsub SDK token](https://docs.anonage.io/api-reference/kyc/get-sumsub-sdk-token.md)
- [Export usage as CSV](https://docs.anonage.io/api-reference/usage/export-usage-as-csv.md)
- [Session log](https://docs.anonage.io/api-reference/usage/session-log.md): Paginated log of sessions (cursor via `next_cursor`). Contains no end-user identity.
- [Usage by key](https://docs.anonage.io/api-reference/usage/usage-by-key.md)
- [Usage summary](https://docs.anonage.io/api-reference/usage/usage-summary.md): Totals over an optional `from`/`to` range (default last 30 days), across the account's keys.
- [Change email](https://docs.anonage.io/api-reference/users/change-email.md): Starts a verify-then-switch flow: a confirmation link is emailed to the new address; the change completes at `/api/auth/confirm-email-change`.
- [Change password](https://docs.anonage.io/api-reference/users/change-password.md)
- [Delete account](https://docs.anonage.io/api-reference/users/delete-account.md): Requires authentication and a verified email.
- [Get profile](https://docs.anonage.io/api-reference/users/get-profile.md)
- [Update profile](https://docs.anonage.io/api-reference/users/update-profile.md): Name changes are ignored once the account is KYC-approved (identity is locked).
- [Verification result callback outbound](https://docs.anonage.io/api-reference/verification-result-callback-outbound.md): When the user approves in their wallet, AnonAge POSTs your `callback_url`. **Verify the signature** before trusting the body: recompute `HMAC_SHA256(signing_secret, "{t}.{rawBody}")` and compare against `v1` in the `X-AnonAge-Signature` header; reject if `t` is older than a few minutes.
- [Open a verification session](https://docs.anonage.io/api-reference/verification/open-a-verification-session.md): Call this from your **server** (never the browser) — your API key and callback URL stay server-side. Returns an opaque `session_id` + `nonce` you encode into the QR / tap-link.
- [Poll a session](https://docs.anonage.io/api-reference/verification/poll-a-session.md): Fallback if the signed callback was missed. You may only read your own sessions.
- [Sumsub webhook (inbound)](https://docs.anonage.io/api-reference/webhooks/sumsub-webhook-inbound.md): Called by Sumsub when verification events occur. No bearer auth — authenticated by the `x-payload-digest` HMAC signature over the raw body.
- [Authentication](https://docs.anonage.io/authentication.md): API keys, the two secrets, and how to keep them safe.
- [Introduction](https://docs.anonage.io/introduction.md): Age-verify your users without ever touching their identity documents.
- [Quickstart](https://docs.anonage.io/quickstart.md): Integrate the full age-verification flow in about 10 minutes.
- [Testing](https://docs.anonage.io/testing.md): Exercise the full loop before you go live.
- [Callbacks](https://docs.anonage.io/webhooks.md): Receive the signed verification result and verify its signature.

## OpenAPI Specs

- [openapi](https://docs.anonage.io/api-reference/openapi.json)