The KYB API Built
for AU/NZ Compliance
A clean REST API and HMAC-SHA256 signed webhooks. Verify any ABN or NZBN, receive real-time event notifications, and integrate Osapher into your existing compliance stack in minutes.
Simple. Predictable.
Well-documented.
/api/enterprise/verify/api/enterprise/api-keys/create/api/enterprise/onboarding-links/api/enterprise/decision-notify/api/admin/platform-overviewReal-time events.
HMAC signed.
Register any HTTPS endpoint and Osapher will deliver signed POST requests whenever a verification event occurs. Each payload includes an X-Osapher-Signature header for verification.
verification.completed
Fires when any verification finishes successfully.
verification.high_risk
Fires when Fracture Score exceeds 50.
certificate.issued
Fires when an officer issues a KYB certificate.
onboarding.submitted
Fires when an applicant completes the onboarding portal.
certificate.expired
Fires when a certificate passes its expiry date.
Verify in 3 lines
curl -X POST \
https://app.osapher.com/api/enterprise/verify \
-H "Authorization: Bearer vnt_ent_live_your_key" \
-H "Content-Type: application/json" \
-d '{"queryValue":"YOUR_ABN_HERE","jurisdiction":"AU"}'{
"result": {
"legalName": "Acme Corp Pty Ltd",
"abn": "11 111 111 111",
"fractureScore": 0,
"fractureRisk": "low",
"fractureSignals": [],
"status": "verified"
}
}Production-grade
security built in
HMAC-SHA256 Signatures
Every webhook payload is signed with your endpoint's secret key. Verify the X-Osapher-Signature header before processing.
Bearer Token Auth
All API requests require a Bearer token. Keys are scoped to your organisation and never logged.
TLS Encryption
All API traffic is encrypted in transit via TLS 1.2+. Keys are hashed before storage.
Sydney Data Centre
All verification data is stored in Sydney (AWS ap-southeast-2). Data does not leave Australia.
Built around verification
// Get Started
Integrate in minutes
Full API access on the free trial. No credit card required. Enterprise plans from $299/month.