Skip to main content
POST
curl

Authorizations

x-api-key
string
header
required

Headers

Content-Type
string

Set to application/json when sending a JSON body.

Example:

"application/json"

Path Parameters

session_id
string<uuid>
required

UUID of the User Verification (KYC) session. Must belong to the same application as the API key — cross-application UUIDs, deleted sessions, and Business Verification (KYB) session IDs all return 404.

Example:

"8c2f3a14-7e9b-4d23-9e83-3f7d5e8a1c6d"

Body

application/json
new_status
enum<string> | null

Optional status label to record on the entry. Accepts any session status value, case-sensitive ("approved" is rejected with 400). Recording a status here does not change the session's actual status — use the update-status endpoint for that.

Available options:
Not Started,
In Progress,
Approved,
Declined,
In Review,
Expired,
Abandoned,
Kyc Expired,
Resubmitted,
Awaiting User
Example:

"In Review"

comment
string | null

Optional free-text note (no enforced length limit). Stored verbatim; @email mentions are not processed on this endpoint.

Example:

"Flagging for manual document re-check."

Response

Entry recorded on the session's audit trail. The session itself is unchanged — its status keeps its previous value and no webhook is sent. The new entry also appears at the top of GET …/reviews/ (with actor_display: "Unknown").

user
string

Display name of the entry's author. Always "Unknown" for entries created through this endpoint, because it records no actor attribution.

Example:

"Unknown"

new_status
enum<string> | null

The status label recorded on the entry, or null if none was sent. The session's actual status is not affected.

Available options:
Not Started,
In Progress,
Approved,
Declined,
In Review,
Expired,
Abandoned,
Kyc Expired,
Resubmitted,
Awaiting User
Example:

"In Review"

comment
string | null

The note recorded on the entry, or null if none was sent.

Example:

"Flagging for manual document re-check."

created_at
string<date-time>

When the entry was written, ISO 8601 UTC.

Example:

"2026-06-12T00:18:44.466537Z"