Feature

APIs & Integrations

Developer-friendly RESTful APIs, real-time webhooks, and pre-built connectors that embed video KYC directly into your existing technology stack.

Overview

Build on a Platform, Not a Silo

BASEKYC is built API-first, meaning every capability available in the UI is also available programmatically. Our RESTful API endpoints let you initiate verification sessions, retrieve case data, manage agent assignments, and pull reports without ever logging into the dashboard. Webhook events notify your systems in real-time when sessions complete, documents are verified, or decisions are made -- enabling fully automated downstream workflows. For common platforms, pre-built integrations with CRM systems like Salesforce and HubSpot, core banking platforms, and third-party identity providers eliminate custom development entirely. Comprehensive documentation, sandbox environments, and versioned endpoints ensure your integration stays stable as we evolve.

Key Highlights

  • RESTful API with comprehensive OpenAPI documentation
  • Real-time webhook events for session lifecycle updates
  • Pre-built connectors for Salesforce, HubSpot, and core banking systems
  • Sandbox environment with test data for safe integration development
  • Versioned endpoints with backward compatibility guarantees

Capabilities

What You Can Do

REST API with Full Documentation

Access every BASEKYC function programmatically through clean, well-documented REST endpoints. Create sessions, query case status, download recordings, manage users, and pull analytics data. Interactive API explorer lets you test calls directly from the documentation.

Webhook Events

Subscribe to granular webhook events for session started, document verified, face match completed, decision made, and more. Payloads include all relevant case data so your downstream systems can react immediately without polling. Retry logic and dead-letter queues ensure no event is lost.

Pre-Built CRM & Banking Connectors

Skip months of custom development with ready-made integrations for popular CRM platforms and core banking systems. Sync customer records bidirectionally, trigger KYC workflows from CRM events, and push verification outcomes back into your system of record automatically.

How It Works

01

Get Your API Key

Generate API credentials from your BASEKYC dashboard. Each key is scoped with specific permissions and rate limits. Use the sandbox environment to test your integration against realistic mock data before going live.

02

Integrate Endpoints

Call REST endpoints to create sessions, submit documents, and retrieve verification results. Use our client libraries for Python, Node.js, Java, and .NET, or build directly against the API with the OpenAPI specification.

03

Receive Webhooks

Register webhook endpoints to receive real-time notifications as verification events occur. Your systems stay in sync without polling, enabling automated workflows like updating CRM records, triggering account provisioning, or sending customer notifications.

Compliance

Enterprise-Grade API Security

Secure API Authentication

All API access is secured via OAuth 2.0 bearer tokens or scoped API keys with granular permission controls. Token rotation, IP whitelisting, and mutual TLS authentication options ensure compliance with RBI's Master Direction on IT Governance (2023), which mandates strong authentication for all programmatic access to customer identity data.

Rate Limiting & Throttling

Configurable rate limits prevent abuse and ensure fair resource allocation across API consumers. Per-key and per-endpoint rate limits with graduated throttling protect against both accidental overload and deliberate misuse, satisfying the cybersecurity resilience requirements under RBI's Cyber Security Framework for Banks and CERT-In guidelines.

Comprehensive Audit Logging

Every API call is logged with request parameters, response codes, timestamps, and caller identity. These logs provide a complete trail of programmatic data access as required under the DPDPA 2023 for demonstrating lawful processing, and under RBI's KYC Master Direction for maintaining records of all CDD-related system interactions.

Data Encryption in Transit

All API communications are encrypted using TLS 1.2 or higher with strong cipher suites. Webhook payloads are signed with HMAC-SHA256 for integrity verification. These measures comply with CERT-In's encryption standards and RBI's mandate for end-to-end encryption of customer data during electronic transmission.

Specifications

Technical Specifications

RESTful

API Architecture

Webhooks

Real-Time Callbacks

<200ms

Avg Response Time

99.9%

Uptime SLA

Sandbox

Test Environment

OAuth 2.0

Authentication

Versioned

Backward Compatible

OpenAPI

Spec Documentation

Related Use Cases

Further Reading

Integrate in Hours, Not Months

Connect BASEKYC to your existing systems with our developer-friendly API, comprehensive documentation, and pre-built connectors.