latestOpenAPI 3.1.02026-08-108094177.6 KB

087dcf516ce2

Managed Custody KYC

Create a Sumsub access token

Issues a short-lived Sumsub access token bound to UR's Sumsub tenant, with a fixed 20 minute TTL. Call this after create-account on the SDK path and relay the token to the Sumsub mobile or web SDK on the user device; re-issue a token bound to the same applicant if the user pauses. Requires an active onboarding session on the SDK data channel; X-Ur-Id must be present.

post/api/fma/v1/kyc/sumsub-access-token

Headers

X-Ur-Idstring required

The user's URID. Required for this endpoint; requests without it fail with INVALID_PARAM.

X-External-User-Idstring

Your partner-side user id. Send at least one of X-Ur-Id or X-External-User-Id.

X-Api-Signaturestring required

Partner Auth EIP-191 signature over the canonical message plus the deadline.

X-Api-Deadlinestring required

Unix timestamp in seconds after which the signature is no longer valid.

X-Api-PublicKeystring required

Partner public key used to verify the signature.

Request body

KycSumsubAccessTokenRequest required

Empty body by design. UR reads urId from the X-Ur-Id header and resolves the active onboarding session server-side.

Response

Business result envelope. code 0 means success; business rejections return HTTP 200 with a non-zero code.

codeinteger

Business result code. 0 means success; business rejections return HTTP 200 with a non-zero code.

messagestring

Human-readable diagnostic for non-zero codes.