API reference

GET /v1/app

Read the id and name of the app behind your secret key.

GET /v1/app

Returns the app your secret key belongs to. Credential: secret key.

curl https://api.facecard.dev/v1/app \
  -H "Authorization: Bearer fc_sk_live_xxx"

{
  "id": "app_...",
  "name": "My app"
}

The SDK calls this once when you do not pass appId to createFaceCardServer, so that verifyTokenOffline can reject tokens minted for another app. See User tokens and JWKS.

/v1/users routes

List, read and delete the users of your app with a secret key.

POST /v1/tokens/verify

Verify a user token from your server.