Documentation menu
Blink KYC documentation
Blink KYC verifies a person's identity inside your product: the SDK photographs their
identity document, checks they are a live person, matches their face to the document, and Blink
returns one decision — VERIFIED, REJECTED or REVIEW.
Try the sample app
Download for Android- Install the downloaded app. Allow installs from your browser if Android asks.
- In the client dashboard, open Integration testing › Generate test session.
- Open Blink KYC and scan that QR, or paste the session link.
- Photograph your ID, complete the face check, and read the result.
Android 7.0 or later. Test sessions are billed like live ones.
How an integration works
Every integration, on every platform, is the same three calls. Your client secret stays on your backend; the device only holds a short-lived session token; and you act on the result your backend reads from Blink.
Create a session
Session API with your client key and secret. You get a
sessionId and a sessionToken.
Run the capture
Give the sessionToken to the SDK or open a
hosted link. Blink runs the document and liveness steps.
Start here
Use cases
Onboarding, document checks, liveness and face match.
Integration options
SDK, hosted link or server API — which to choose.
Credentials & test sessions
Client keys, web origins and testing without code.
Choose your platform
Android
Kotlin, coroutines, CameraX drop-in screens.
iOS
Swift, async/await, drop-in capture.
Web
TypeScript, framework-agnostic, drop-in or headless.
Flutter
One package for Android and iOS, backend guide included.
React Native
Drop-in view on vision-camera.
Hosted link
No app code: send a link or QR to Blink's page.
The API at a glance
| Call | Who calls it | Authentication |
|---|---|---|
POST /api/blink/session/create | Your backend | Client key + secret |
GET /api/blink/session/{sessionId}/result | Your backend | Client key + secret |
GET /api/blink/session/{sessionId}/documents | Your backend | Client key + secret |
GET /api/blink/session/{sessionId}/documents/bundle | Your backend | Client key + secret |
/api/sdk/* | The SDK, on the device | Session token |
Details in Authentication; the machine-readable contract is the OpenAPI spec.
Blink is a black box by design. You receive a decision and a neutral reason — never the scores, thresholds or methods behind it, so the checks can't be reverse-engineered.
