Skip to main content
GET
Get a step-up
Authentication is new. These endpoints are served by your application’s issuer, such as https://<name>.auth.didit.me, and never take your Didit API key.
A step-up belongs to the session that created it: another session’s access token gets 404. A pending step-up reads expired once its 30 minutes pass.

Authorizations

Authorization
string
header
required

The person's access token from POST /token/: an ES256 JWT with header typ: at+jwt, valid for at most 5 minutes. Not your Didit API key.

Path Parameters

step_up_id
string<uuid>
required

The id from POST /step-up/, also the step_up query parameter on your return_to. A value that is not a UUID gets a 404 page, not JSON.

Response

The step-up.

A verification the person has to pass before the action.

id
string<uuid>
required
Example:

"94efc2c3-ca84-42fe-900b-6fb61669a7a1"

rule
enum<string>
required

The rule that asked for it. When several apply, the one with the strongest method.

Available options:
payout,
device,
bank,
contact
Example:

"payout"

method
enum<string>
required

What the person does: liveness, selfie (liveness matched to the face Didit already holds) or full_id (document and selfie). When Didit holds no face for the person yet, selfie becomes full_id once they open verification_url.

Available options:
liveness,
selfie,
full_id
Example:

"selfie"

status
enum<string>
required

Act only on approved. review waits for your team's review. declined is not final while verification_url works: the person can try again, and the step-up returns to pending. superseded means another check took over its verification, or the result was not for this step-up: create a new one.

Available options:
pending,
review,
approved,
declined,
expired,
superseded
Example:

"pending"

level
enum<string> | null
required

The level the verification reached, once approved.

Available options:
liveness,
liveness_face_match,
full_id,
null
Example:

null

amount
string | null
required

The payout amount, two decimals.

Example:

"900.00"

currency
string | null
required
Example:

"USD"

created_at
string<date-time>
required
Example:

"2026-10-17T10:41:14.894632Z"

completed_at
string<date-time> | null
required
Example:

null

expires_at
string<date-time>
required

30 minutes after creation. Reading a step-up first collects any result its verification reached, so it can still read approved, review or declined after this time; one still pending reads expired.

Example:

"2026-10-17T11:11:14.894581Z"