Loading…
TrustVerify is a plain JSON REST API with one auth header. These snippets use each language's standard HTTP client and work as written.
We do not currently publish a package on npm, PyPI, Packagist or pkg.go.dev, and we would rather say so than have your first command fail. When a client library ships it will be announced in the API changelog, and the install command here will point at a package you can actually install.
In the meantime the whole API is 8 endpoints of JSON over HTTPS. The examples below are the complete integration — there is nothing an SDK would be hiding from you.
Three things, then your first call
Dashboard → API Keys → create a Test key (tv_test_sk_…). Free, and it never touches a paid provider.
Authorization: Bearer <key>, or the equivalent X-TrustVerify-API-Key header. Server-side only.
https://api.trustverify.co.uk/api/v1 — the same host for sandbox and live. Your key decides which you get.
Copy, set TV_API_KEY, run.
# Smoke-test your key first — no request body, no charge.
curl https://api.trustverify.co.uk/api/v1/validate-key \
-H "Authorization: Bearer tv_test_sk_YOUR_KEY"
# {"valid":true,"plan":"free","keyName":"…",
# "limits":{"requestsPerMinute":60,"requestsPerMonth":1000},
# "usage":{"current":12,"quota":1000}}# Optional: exchange the long-lived key for a 1-hour Bearer token
# so the key itself never travels beyond your auth service.
curl -X POST https://api.trustverify.co.uk/api/v1/token \
-H "Content-Type: application/json" \
-d '{
"grantType": "client_credentials",
"clientId": "my-integration",
"clientSecret": "tv_live_sk_YOUR_KEY"
}'
# {"accessToken":"eyJhbGciOi…","expiresIn":3600,"tokenType":"Bearer"}