> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # MitID personal > Start MitID personal identity verification through the standalone API, without a workflow. Start MitID personal verification from your backend using your application API key. You do not need a workflow or a `workflow_id`. The start response describes the next authentication action; it is not an approved identity result. ## Coverage and activation | Property | Value | | - | - | | Wallet | MitID personal | | Wallet ID | `mitid` | | Countries | Denmark | | Production wallet activation | ✅ Available | | Published wallet price | \$0.25 per completed verification | Wallet activation is separate from API deployment and your application's eligibility. A documented endpoint does not activate a wallet that is marked Coming soon. For current published rates, see [digital ID wallet pricing](/getting-started/pricing#digital-id-wallet-pricing). ## What the person does Follow the next action returned by the start request. The wallet's authentication experience determines whether the person uses a browser, another device or an app. ## Receive the result Follow the [Digital ID wallet API guide](/standalone-apis/digital-id-wallets) to track the verification and retrieve its result. Treat only a completed, verified result as proof that the wallet authenticated the person. Returned identity attributes vary by wallet; do not assume an address, portrait or every requested attribute is present. ## Related * [Digital ID wallet APIs](/standalone-apis/digital-id-wallets) * [Wallet coverage and attributes](/core-technology/id-verification/digital-id-wallets) * [Pricing](/getting-started/pricing#digital-id-wallet-pricing) ## OpenAPI ````yaml POST /v3/id-verification/wallets/mitid/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: Identity verification API. Authenticate with x-api-key header. servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/id-verification/wallets/mitid/: post: tags: - Digital ID wallets summary: Start MitID verification description: >- Start a MitID sign-in (Danish Agency for Digital Government; DNK) without any workflow. Billed once, only when the identity is verified. The response carries next_action.type=redirect with the URL to send the user's browser to; the user returns to return_url with request_id and result appended. Read the outcome with GET /v3/id-verification/wallets/verifications/{request_id}/ or from the webhook, never from the URL. Sandbox applications get a deterministic simulation (simulated: true) that never contacts the provider. operationId: start_mitid_wallet_verification parameters: - in: header name: Idempotency-Key schema: type: string description: >- Optional retry-safety key (max 255 characters). Retrying with the same key, wallet and body returns the original verification without starting a second sign-in; the same key with another wallet or body returns 409 idempotency_key_reused. requestBody: content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiMitidWalletVerificationStartRequest example: country: DNK vendor_data: your-customer-reference metadata: reference: example return_url: https://app.example.com/identity/complete application/x-www-form-urlencoded: schema: $ref: >- #/components/schemas/DigitalIdWalletApiMitidWalletVerificationStartRequest multipart/form-data: schema: $ref: >- #/components/schemas/DigitalIdWalletApiMitidWalletVerificationStartRequest required: true responses: '201': content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationResponse example: request_id: 00000000-0000-4000-8000-000000000001 wallet_verification: wallet: id: mitid name: MitID issuing_authority: Danish Agency for Digital Government country: DNK status: Not Finished outcome: pending error: null interaction: redirect simulated: false expires_at: '2026-01-01T10:10:00Z' next_action: type: redirect url: https://wallet.example.com/authorize identity: null attributes: null level_of_assurance: null verified_at: null signature_valid: null credential_type: person_identification vendor_data: your-customer-reference metadata: reference: example created_at: '2026-01-01T10:00:00Z' description: '' '400': content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationStartBadRequest description: >- Field validation errors ({field: [messages]}), or error return_url_invalid, return_url_not_allowed, invalid_personal_code, invalid_phone_number or idempotency_key_invalid. '403': content: application/json: schema: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationStartForbidden description: >- Missing or invalid credentials ({detail}), or error wallet_unavailable, insufficient_credits or contract_rate_missing. '409': content: application/json: schema: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' description: >- error idempotency_key_reused or idempotency_key_in_progress (with Retry-After). '502': content: application/json: schema: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' description: >- error wallet_provider_unavailable: the provider could not start; nothing was created. '503': content: application/json: schema: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' description: >- error wallet_not_configured: this environment cannot reach the wallet. security: - ApiKeyAuth: [] - BearerAuth: [] x-codeSamples: - lang: curl label: cURL source: |- curl --request POST \ --url https://verification.didit.me/v3/id-verification/wallets/mitid/ \ --header 'x-api-key: YOUR_API_KEY' \ --header 'Idempotency-Key: your-unique-attempt-key' \ --header 'Content-Type: application/json' \ --data '{ "country": "DNK", "vendor_data": "your-customer-reference", "metadata": { "reference": "example" }, "return_url": "https://app.example.com/identity/complete" }' - lang: python label: Python source: | import os import requests headers = { "x-api-key": os.environ["DIDIT_API_KEY"], "Idempotency-Key": "your-unique-attempt-key" } payload = {'country': 'DNK', 'vendor_data': 'your-customer-reference', 'metadata': {'reference': 'example'}, 'return_url': 'https://app.example.com/identity/complete'} response = requests.post( "https://verification.didit.me/v3/id-verification/wallets/mitid/", headers=headers, json=payload, timeout=30, ) response.raise_for_status() print(response.json()) components: schemas: DigitalIdWalletApiMitidWalletVerificationStartRequest: type: object description: Start a MitID verification (DNK). properties: vendor_data: type: string nullable: true description: >- Your own reference for this verification (e.g. your user id). Returned in results and webhooks. metadata: type: object additionalProperties: {} nullable: true description: >- Optional JSON object stored with the verification and returned in results and webhooks. sandbox_scenario: type: string minLength: 1 description: >- Sandbox applications only: the simulated outcome - 'wallet_cancelled', 'wallet_timeout' or 'wallet_provider_error'; any other scenario (or none) verifies. Rejected on live applications. The full catalog is available at GET /v1/sandbox/scenarios/. country: allOf: - $ref: >- #/components/schemas/DigitalIdWalletApiMitidWalletVerificationStartCountryEnum default: DNK description: >- ISO 3166-1 alpha-3 country of the MitID identity. Defaults to DNK, the only country it serves. * `DNK` - DNK return_url: type: string format: uri minLength: 1 description: >- https URL the user's browser returns to after the wallet, with request_id and result appended. Its host must be registered in the application's allowed_return_hosts (or be its white-label domain). Never trust result on its own: read the outcome with GET .../verifications/{request_id}/ or the webhook. maxLength: 2048 device: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiDeviceEnum' default: same_device description: >- same_device when the user signs in on the device showing your page, cross_device when they use another one (e.g. BankID's QR code). * `same_device` - same_device * `cross_device` - cross_device required: - return_url DigitalIdWalletApiWalletVerificationResponse: type: object description: One standalone wallet verification, as every wallet endpoint answers it. properties: request_id: type: string format: uuid wallet_verification: $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationResult' vendor_data: type: string nullable: true metadata: type: object additionalProperties: {} nullable: true description: The metadata object sent at start, or null. created_at: type: string format: date-time required: - created_at - metadata - request_id - vendor_data - wallet_verification DigitalIdWalletApiWalletVerificationStartBadRequest: oneOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' - $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationFieldErrors' DigitalIdWalletApiWalletVerificationStartForbidden: oneOf: - $ref: >- #/components/schemas/DigitalIdWalletApiClientCredentialsForbiddenErrorMessage - $ref: '#/components/schemas/DigitalIdWalletApiWalletVerificationError' DigitalIdWalletApiWalletVerificationError: type: object properties: error: type: string description: Stable machine-readable code, e.g. wallet_unavailable. detail: type: string required: - detail - error DigitalIdWalletApiMitidWalletVerificationStartCountryEnum: enum: - DNK type: string description: '* `DNK` - DNK' DigitalIdWalletApiDeviceEnum: enum: - same_device - cross_device type: string description: |- * `same_device` - same_device * `cross_device` - cross_device DigitalIdWalletApiWalletVerificationResult: type: object properties: wallet: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWallet' readOnly: true country: type: string status: type: string description: Not Finished while pending, then Approved (verified) or Declined. outcome: $ref: >- #/components/schemas/DigitalIdWalletApiWalletVerificationResultOutcomeEnum error: type: string nullable: true readOnly: true interaction: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiInteractionEnum' readOnly: true simulated: type: boolean readOnly: true expires_at: type: string format: date-time next_action: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletNextAction' nullable: true readOnly: true identity: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletIdentity' nullable: true readOnly: true attributes: type: object additionalProperties: {} nullable: true readOnly: true level_of_assurance: type: string nullable: true verified_at: type: string format: date-time nullable: true signature_valid: type: boolean nullable: true description: >- True once the credential's signature was verified; null for a simulated one. credential_type: type: string nullable: true required: - attributes - country - credential_type - error - expires_at - identity - interaction - level_of_assurance - next_action - outcome - signature_valid - simulated - status - verified_at - wallet DigitalIdWalletApiWalletVerificationFieldErrors: type: object description: 'Request validation errors: each rejected field with its messages.' additionalProperties: type: array items: type: string DigitalIdWalletApiClientCredentialsForbiddenErrorMessage: type: object properties: detail: type: string default: Forbidden - User doesn't have permission DigitalIdWalletApiWallet: type: object properties: id: type: string description: Catalog id of the wallet, e.g. bankid_se. name: type: string issuing_authority: type: string nullable: true required: - id - issuing_authority - name DigitalIdWalletApiWalletVerificationResultOutcomeEnum: enum: - pending - verified - cancelled - timeout - failed type: string description: |- * `pending` - Pending * `verified` - Verified * `cancelled` - Cancelled by the user * `timeout` - Timed out * `failed` - Failed DigitalIdWalletApiInteractionEnum: enum: - redirect - in_app type: string description: |- * `redirect` - redirect * `in_app` - in_app DigitalIdWalletApiWalletNextAction: type: object properties: type: allOf: - $ref: '#/components/schemas/DigitalIdWalletApiWalletNextActionTypeEnum' description: >- redirect: send the user's browser to url. confirm_in_app: show verification_code to the user, who checks it matches the code in their wallet app and confirms there; then poll. * `redirect` - redirect * `confirm_in_app` - confirm_in_app url: type: string format: uri description: 'redirect only: where the user signs in with the wallet.' verification_code: type: string description: >- confirm_in_app only: the 4-digit comparison code the wallet app shows too. poll_interval_seconds: type: integer description: >- confirm_in_app only: how often to call POST .../verifications/{request_id}/poll/ for prompt feedback. Didit also polls pending sign-ins in the background, so the webhook reports the outcome even when you do not poll. required: - type DigitalIdWalletApiWalletIdentity: type: object properties: full_name: type: string nullable: true first_name: type: string nullable: true last_name: type: string nullable: true date_of_birth: type: string format: date nullable: true nationality: type: string nullable: true description: ISO3 nationality, only when the wallet asserts one (never inferred). issuing_state: type: string description: ISO3 country whose scheme issued the identity. required: - date_of_birth - first_name - full_name - issuing_state - last_name - nationality DigitalIdWalletApiWalletNextActionTypeEnum: enum: - redirect - confirm_in_app type: string description: |- * `redirect` - redirect * `confirm_in_app` - confirm_in_app securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys. BearerAuth: type: http scheme: bearer description: The application's client-credentials access token. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.