latestOpenAPI 3.1.02026-08-108094177.6 KB

087dcf516ce2

External Wallet Access KYC

Hand off a Sumsub share token for an external wallet user

External Wallet Access variant of the shared-token handoff: Partner Auth signs the raw body and urId travels in the body, not a header. The first handoff lazily creates the onboarding session; UR copies the applicant, validates the data, and returns the same passed, incomplete, or terminal verdict as the Managed Custody handoff.

post/api/v1/sumsub/reuse-share-token

Headers

X-Api-Signaturestring required

Partner Auth EIP-191 signature over the canonical message plus the deadline.

X-Api-Deadlinestring required

Unix timestamp in seconds after which the signature is no longer valid.

X-Api-PublicKeystring required

Partner public key used to verify the signature.

Request body

shareTokenstring required

Single-use Sumsub share token minted in your tenant with forClientId set to UR's clientId. Mint a fresh token for every handoff attempt.

urIdinteger required

The user's URID (NFT token id). Travels in the body in External Wallet Access Mode.

Response

Business result envelope. code 0 means success; business rejections return HTTP 200 with a non-zero code.

codeinteger

Business result code. 0 means success; business rejections return HTTP 200 with a non-zero code.

messagestring

Human-readable diagnostic for non-zero codes.