A developer working at a desk lit by monitors
Developers

Trust as an API.
Verified in three calls.

Ask for the fields and agreements you need, let the person approve on their phone, then read live, verified values. Nothing sensitive to store on your side.

Open the docs GitHub
  • REST + SDKs
  • Webhooks
  • Open protocol
Login with Atrustos

Three calls to a
verified customer.

Authenticate server-side with your secret key. The person approves on their own device, and you get a signed result plus live fields.

  1. 01
    Start a connect request

    Name the fields and agreements your app needs. You get a request id and a QR to show.

  2. 02
    The person approves on their phone

    They see exactly what you asked for and approve with a fingerprint. Poll or wait for the webhook.

  3. 03
    Read live, verified fields

    Read the current value under the grant, with how each field was proven. Store nothing sensitive.

Authorization: Bearer sk_live_…
POST /v1/auth/connect/start
{
  "auth_app_id": "app_live_9Qx…",
  "required_field_ids": ["legal_name", "email"],
  "agreement_ids": ["tos_v3"]
}

→ 201 Created
{ "request_id": "req_7f3a…", "qr_url": "https://…", "expires_in": 300 }
Webhooks

Stay current
without polling.

Subscribe to grants, updates, signatures and revocations. When a customer changes a field or pulls access, you know in the same second.

  • Signed payloads you can verify.
  • Retries with backoff, ordered per vault.
  • Test events from the testbox.
POST https://api.yourapp.com/atrustos/eventslive demo
    Build with

    Everything you need to integrate.

    Documentation

    Quickstarts and references for the SDK, auth flow and Company API.

    Read the docs

    SDK

    Drop-in libraries to start connect requests, verify signatures and handle grants.

    Get the SDK

    Company API

    Secret keys, REST JSON, restricted scopes per app. Same power as the portal.

    API reference

    Webhooks

    Subscribe to sign, grant, update and revoke events to keep your records current.

    Event catalog

    Learning Hub

    Tutorials and patterns: verified onboarding, field requests, agreement re-sign and more.

    Start learning

    GitHub

    The open protocol, plus the source-available ledger, gateway and SDK, under the Atrustos org.

    Browse repos

    Test and live keys

    Use sk_test_… on the testbox and sk_live_… in production. Secrets are shown once and stored as hashes; revoked keys fail closed. Scope each app to full or restricted access.

    authpostbox.letters.sendagreements.sendusers.read

    Open protocol, auditable core

    The protocol (message formats, cryptography and signing rules) is open source under Apache 2.0. The core ledger, gateway and SDK are source-available, so anyone can audit exactly how Atrustos works.

    protocol · Apache 2.0core-ledgerapi-gatewaysdk
    A highway at dusk with light trails under a pink sky

    Ship verified login.
    This afternoon.

    Grab the docs, create a test key and connect your first verified customer.

    Get early access Read the docs

    Photography: Unsplash