Skip to main content
POST
/
accounts
/
{accountId}
/
verification
Create Verification Token
curl --request POST \
  --url https://api.rolla.xyz/api/v1/external/accounts/{accountId}/verification \
  --header 'X-API-Key: <api-key>'
{
  "success": true,
  "message": "Verification token created successfully",
  "data": {
    "sumsubToken": {
      "token": "<string>",
      "userId": "<string>"
    },
    "externalUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  }
}
Creates an identity verification access token for an individual account, so the account holder can complete ID document upload and a liveness check using the Sumsub WebSDK embedded in your application. For related persons on business accounts, use Generate KYC Link instead — it provides a hosted page and requires no SDK integration.

​
Example Request

curl -X POST "https://api.rolla.xyz/api/v1/external/accounts/b6075be0-f1d0-451f-a468-3e94563101d2/verification" \
  -H "X-API-Key: your_api_key_here"

​
Example Response

{
  "success": true,
  "message": "Verification token created successfully",
  "data": {
    "sumsubToken": {
      "token": "_act-sbx-jwt-eyJhbGciOiJub25lIn0...",
      "userId": "2b51a9ce-c391-4751-b10c-18b18b256018"
    },
    "externalUserId": "2b51a9ce-c391-4751-b10c-18b18b256018"
  }
}

​
Using the token

Pass the token to the Sumsub WebSDK in your frontend. The SDK walks the user through document capture and liveness: 
import SumsubWebSdk from '@sumsub/websdk-react';

<SumsubWebSdk
  accessToken={data.sumsubToken.token}
  expirationHandler={() => fetchNewToken()}
/>
Tokens expire after 30 minutes. Use the SDK’s expiration handler to request a fresh token from this endpoint.
Poll Get Verification Status to confirm the result before submitting the application.

Authorizations

​
X-API-Key
string
header
required

Your Rolla API key

Path Parameters

​
accountId
string<uuid>
required

Identifier of an account owned by the same user as your API key's business

Response

Verification token created successfully

​
success
boolean
Example:

true

​
message
string
Example:

"Verification token created successfully"

​
data
object