One API for player verification and risk.

Retrieve this OpenAPI contract

Exchange a short-lived one-time integration setup code

Send the dashboard-issued code once from a trusted server process. Keep the response in memory only, write the returned credential directly to the selected server-side secret manager, and discard both secret values. Responses are never cacheable.

Submit evidence-backed integration acceptance checks

The credential environment selects the Sandbox or Production-isolated gate. The checks object must contain every named check for that environment with value true, and revision must be the exact 40-character lowercase hexadecimal Git commit. Sandbox checks: authentication, tenant_isolation, session_creation, status_mapping, webhook_signature, webhook_replay, synthetic_only. Production checks: certified_revision, isolated_configuration, authentication, synthetic_webhook, secret_redaction, rollback, no_real_applicants.

Create or resolve an applicant by player reference

Retrieve safe applicant metadata

List verification cases

Create a verification case

Check a verification case

Resume eligible correction steps or restart an expired or abandoned attempt

Cancel a non-final case

List verification case events

Request a consent-bound step-up verification

Requires `verification_cases:write`. Returns a single-use player consent URL; production provider access fails closed until approved configuration exists.

Create a short-lived, origin-bound PlayPrint browser grant

Call only from the operator server. The resulting token is safe to pass to the matching authenticated player session; the operator credential must never enter browser code.

Record a player PlayPrint consent receipt

Call from the operator server after an explicit player choice. Pryzr stores only tenant-scoped hashes of the player and receipt references.

Withdraw a player PlayPrint consent receipt

Stops the receipt from authorizing telemetry and removes its derived player profile.

Ingest browser telemetry using a short-lived PlayPrint grant

Accepts CORS requests only when the HTTPS Origin, SDK configuration version, player, session, device and consent receipt match the signed browser grant.

Submit a batch of consented PlayPrint signals

Accepts privacy-safe behavioral summaries. Raw coordinates, typed text, credentials, documents, payment data, message content, and unknown signal fields are rejected.

Submit one transaction event

Accepts provider-neutral transaction lifecycle data. Stable account, payment, device, session, and network references are irreversibly tenant-hashed before persistence.

Register an outbound webhook endpoint

Requires `webhook_endpoints:write`. The signing secret is returned once; an idempotent replay returns `secret_omitted` instead.

Update endpoint destination, status, or subscriptions

Requires `webhook_endpoints:write`. Changing the destination preserves the endpoint ID and active signing secrets.

Rotate an endpoint signing secret

Requires `webhook_endpoints:write`. The new secret is returned once; the previous secret remains valid only for the bounded overlap.

Queue a signed synthetic test event

Requires `webhook_endpoints:write`.

List outbound webhook delivery history

Requires `webhook_deliveries:read`. Unknown or repeated query parameters are rejected.

Queue an audited redelivery of a settled delivery

Requires `webhook_deliveries:write`.