Retrieve a session's result
Called from your backend with the secret key. The only trustworthy read of the decision — treat the user as verified only when status is complete AND decision is real. When a capture was blocked for suspected injection, checks is null and risk carries only {injection_blocked: true, reason: "suspected_injection"} — scores are withheld so flagged sessions can’t probe the detectors.
Authorizations
Your secret key (sk_live_…), server-side only. Also accepted as an x-api-key header.
Path Parameters
The vs_… session id.
Response
The session
verification_session created, complete, failed, expired Verified = status "complete" AND decision "real".
real, spoof, null Per-product outcome. Null until complete, and null on injection-blocked sessions.
Whether the captured selfie is retrievable via the /media sub-resource.
Capture attempts used (max 3).
e.g. ATTEMPTS_EXHAUSTED on failed sessions.
