Skip to main content
You’re receiving Sumvin credentials at your request boundary — a JWT, sometimes with an accompanying EIP-712 signature — and you need to verify them. The Verifier Guide is your primary surface.

Which tier applies to you?

Two tiers cover every verification case:
  • Standard tier — JWT verification alone. Use this for identity-only flows: age gates, proof of personhood, KYC attestation.
  • Enhanced tier — JWT plus EIP-712 PINT signature verification. Use this for spend authorisation and any flow carrying sr:us:pint:spend:execute.
The verification tiers page is the authoritative decision doc — read it before writing any verification code.

Start here

Read in this order:
  1. Verifier overview — what you receive and what to verify.
  2. The quickstart that matches your tier:
  3. If you’re accepting PINTs at a checkout endpoint specifically, also run Accept a PINT at checkout.

Reference material you’ll come back to

What to skip for now

  • The Platform API is for partners creating users and wallets, not for verifiers. You do not need a Platform API account to verify JWTs.
  • The JWKS endpoint is public — you do not need a SIS API key to verify signatures. An API key is only needed if you intend to call the revocation endpoint.

Next up

  1. Verifier overview — what you receive and what to verify.
  2. Verification tiers — pick the right tier for your endpoint.
  3. Verify a standard PINT — JWT-only verification quickstart.
  4. JWKS endpoint — where to fetch SIS public keys.