Authentication
CoreVerify uses API keys to authenticate requests. You can create and manage API keys from Account → Developer Settings in the dashboard.
API Key Types
| Type | Prefix | Use |
|---|---|---|
| Secret | sk_live_... | Full API access — server-side only |
| Publishable | pk_live_... | Read-only, safe for frontend |
Security: Never expose your secret key in client-side code. Treat it like a password — it grants full access to your account.
Using Your API Key
Include your key as a Bearer token in the Authorization header:
curl https://api.coreverify.com/v1/reports \
-H "Authorization: Bearer sk_live_your_secret_key"Test vs Live Keys
CoreVerify provides separate test and live environments. Test keys use the prefix sk_test_ and pk_test_, and do not initiate real background checks or billing.
| Environment | Secret Prefix | Publishable Prefix |
|---|---|---|
| Live | sk_live_... | pk_live_... |
| Test | sk_test_... | pk_test_... |
Authentication Errors
| Status | Code | Meaning |
|---|---|---|
| 401 | unauthorized | Missing or invalid API key |
| 403 | forbidden | Key does not have permission for this action |