---
title: "Get userinfo for a verification"
method: GET
path: "/v1/verifications/{verificationId}/userinfo"
tags: ["Verifications"]
---

# Get userinfo for a verification

`GET /v1/verifications/{verificationId}/userinfo`

Returns user information aligned with OIDC /userinfo output. Contains authentication context, user claims, provenance, and missing_claims.

## Path parameters

- `verificationId` string, required

## Response `200`

Userinfo retrieved

- GetVerificationUserInfoResponseDto
  - `sub` string — Pairwise subject (accountId)
  - `acr` string — Authentication Context Class Reference
  - `hopae_loa` number — Hopae Level of Assurance
  - `amr` object — Authentication Methods Reference
  - `missing_claims` string[] — Missing claim names
  - `user` VerificationUserBlockDto
  - `provenance` VerificationProvenanceDto
    - `presentation` object — Presentation context
    - `_metadata` object — Metadata
  - `provider_id` string — Provider identifier that authenticated the subject. Mirrors the single element in `amr` for forward compatibility.
  - `verification_model` 'disclosure' | 'match' — Always present. Indicates which top-level payload to interpret: `disclosure` (user attributes under `user`) or `match` (comparison envelope under `match`, with `user: null`). Legacy verifications without a stored model default to `disclosure`.
  - `match` MatchEnvelopeDto — Result envelope for match-capable providers. Present only when `verification_model` is `match`.
    - `matched` boolean, required — Aggregate match outcome across all submitted fields.
    - `granularity` 'aggregate' | 'per_field', required — Determines whether `details` is included. `per_field` exposes per-field outcomes; `aggregate` exposes only the overall `matched` flag.
    - `submitted_fields` string[], required — Field keys the RP supplied in `matchData`. Provider-native names — not normalised.
    - `details` object — Per-field outcomes, keyed by field name. Present only when `granularity` is `per_field`. May include verifier keys beyond `submitted_fields` (e.g., `face_photo_disparity` from mObywatel) when the upstream provider emits them.

## Other responses

- `400` — Verification is not completed

---

[API](https://skmtc.net/hopae/apis/hconnect-api.md) · [All operations](https://skmtc.net/hopae/apis/hconnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hopae/hconnect-api/versions/ed6e97ac6f2f/schema)