{
  "info": {
    "_postman_id": "9ca83e6c-b70a-4bd5-9864-419540926a4a",
    "name": "Sumio Identity Verification API v1",
    "description": "Official merchant API collection. Keep api_key and biometric input only in a private Postman environment; never export them. Public camera/session routes use a separate edge budget and may return 429; merchant request schemas are unchanged.",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "auth": {
    "type": "bearer",
    "bearer": [
      {
        "key": "token",
        "value": "{{api_key}}",
        "type": "string"
      }
    ]
  },
  "variable": [
    {"key": "base_url", "value": "https://api.sumio.cc", "type": "string"},
    {"key": "api_key", "value": "", "type": "string"},
    {"key": "verification_id", "value": "", "type": "string"},
    {"key": "reference_image_base64", "value": "", "type": "string"},
    {"key": "webhook_url", "value": "https://merchant.example/kyc/events", "type": "string"}
  ],
  "item": [
    {
      "name": "Create verification — JSON Base64",
      "event": [
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "if (pm.response.code === 201) {",
              "  const body = pm.response.json();",
              "  pm.collectionVariables.set('verification_id', body.id);",
              "}"
            ]
          }
        }
      ],
      "request": {
        "method": "POST",
        "header": [{"key": "Content-Type", "value": "application/json", "type": "text"}],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"reference_image_base64\": \"{{reference_image_base64}}\",\n  \"webhook_url\": \"{{webhook_url}}\",\n  \"metadata\": {\n    \"customer_id\": \"customer-4821\"\n  }\n}",
          "options": {"raw": {"language": "json"}}
        },
        "url": {
          "raw": "{{base_url}}/v1/verifications",
          "host": ["{{base_url}}"],
          "path": ["v1", "verifications"]
        },
        "description": "Creates a session. verification_url is returned only here; preserve it securely."
      }
    },
    {
      "name": "Create verification — multipart file",
      "request": {
        "method": "POST",
        "header": [],
        "body": {
          "mode": "formdata",
          "formdata": [
            {"key": "reference_image", "type": "file", "src": []},
            {"key": "webhook_url", "value": "{{webhook_url}}", "type": "text"},
            {"key": "metadata", "value": "{\"customer_id\":\"customer-4821\"}", "type": "text"}
          ]
        },
        "url": {
          "raw": "{{base_url}}/v1/verifications",
          "host": ["{{base_url}}"],
          "path": ["v1", "verifications"]
        }
      }
    },
    {
      "name": "Get verification status",
      "request": {
        "method": "GET",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/verifications/{{verification_id}}",
          "host": ["{{base_url}}"],
          "path": ["v1", "verifications", "{{verification_id}}"]
        }
      }
    },
    {
      "name": "Cancel verification",
      "request": {
        "method": "POST",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/verifications/{{verification_id}}/cancel",
          "host": ["{{base_url}}"],
          "path": ["v1", "verifications", "{{verification_id}}", "cancel"]
        }
      }
    },
    {
      "name": "Delete verification data",
      "request": {
        "method": "DELETE",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/verifications/{{verification_id}}",
          "host": ["{{base_url}}"],
          "path": ["v1", "verifications", "{{verification_id}}"]
        },
        "description": "Irreversibly purges biometric material and revokes the public link. Returns 204."
      }
    }
  ]
}