Idswyft

Spec sheet

What it does

Idswyft provides an identity-verification API combining document OCR, cross-validation, liveness detection and face matching.Read 15 Oct 2026 · idswyft.app

Purpose

Idswyft is an open-source identity verification API for developers.Read 1 Oct 2026 · idswyft.app

API

The REST API exposes session initialization, document uploads, live capture, status retrieval and webhook-based results.Read 15 Oct 2026 · github.com

Integrations

It provides hosted flows, a REST API, and an embeddable TypeScript SDK with React components, iframe support, and webhooks.Read 1 Oct 2026 · idswyft.app

Privacy

Face embeddings are stripped before persistence, retention is configurable, and full erasure endpoints are available.Read 1 Oct 2026 · idswyft.app

Support

Community Edition support is provided through GitHub Issues, while Cloud Starter includes email support and Cloud Pro includes priority support.Read 1 Oct 2026 · idswyft.app

Age screening

The product compares estimated face age with declared date of birth as an identity-borrowing signal.Read 15 Oct 2026 · idswyft.app

Architecture

The core API is a Node.js and TypeScript service while OCR, face detection, liveness and deepfake analysis run in a separate engine container.Read 15 Oct 2026 · github.com

Barcode and MRZ

PDF417 barcodes and TD1, TD2 and TD3 MRZ formats are parsed and checked against front-side OCR.Read 15 Oct 2026 · github.com

Biometrics

Face matching uses face-api.js embeddings and supports passive and head-turn liveness modes.Read 1 Oct 2026 · idswyft.app

Cloud limits

The API reference lists cloud limits of 1,000 requests per developer key per hour and five verifications per user per hour.Read 15 Oct 2026 · idswyft.app

Compliance screening

Idswyft screens names against Politically Exposed Persons databases via OpenSanctions and offers apparent-face-age checks against declared date of birth.Read 1 Oct 2026 · idswyft.app

Credentials

After verification, the system can issue W3C Verifiable Credentials as JWT-VCs signed with Ed25519 and resolvable through did:web.Read 15 Oct 2026 · idswyft.app

Cross-validation

Levenshtein and exact-match scoring compares front OCR with back barcode or MRZ data, sending unreadable barcodes to review instead of automatically passing them.Read 15 Oct 2026 · idswyft.app

Decision model

Idswyft says verification decisions are deterministic and do not use an LLM in the pass-or-fail path.Read 15 Oct 2026 · idswyft.app

Document support

The service accepts passports, driver’s licenses and national IDs, including MRZ and PDF417 data.Read 15 Oct 2026 · idswyft.app

Documentation

The documentation includes API rate limits, status codes, a semantic-versioned changelog, endpoint history and support contact details.Read 15 Oct 2026 · idswyft.app

Face matching

A live capture is compared with the document portrait using face-api.js embeddings and a configurable confidence threshold.Read 15 Oct 2026 · idswyft.app

Founder

The official site identifies Obed Lorisson as founder and developer.Read 15 Oct 2026 · idswyft.app

Fraud prevention

Velocity checks and IP geolocation detect bot submissions, IP reuse, Tor exit nodes, datacenter proxies, and country mismatches.Read 1 Oct 2026 · idswyft.app

Fraud signals

Velocity checks, IP reuse, Tor or datacenter-proxy detection and document-origin country mismatch are listed as fraud controls.Read 15 Oct 2026 · idswyft.app

Hosted flow

A hosted verification page lets developers redirect users without building a front end.Read 15 Oct 2026 · idswyft.app

Independent praise: privacy

A Reddit discussion praises that the ML engine can run locally so identity images do not leave the operator’s server.Read 15 Oct 2026 · reddit.com

Independent praise: setup

The Reddit write-up describes Docker deployment in roughly two minutes and API integration in about 30 minutes.Read 15 Oct 2026 · reddit.com

Licence

The community source code is released under the MIT License, while the Idswyft name and logo remain trademarks.Read 15 Oct 2026 · github.com

Limit: country coverage

The same discussion says 19 countries have format-specific validation and that expanding coverage remains ongoing.Read 15 Oct 2026 · reddit.com

Limit: OCR accuracy

The founder’s Reddit post reports roughly 65% field-level accuracy across seven tested US driver-license states and says address extraction is weakest.Read 15 Oct 2026 · reddit.com

Limit: SDK coverage

The founder says JavaScript is available while a Python SDK is planned for a later release.Read 15 Oct 2026 · reddit.com

Limit: vendor parity

The founder acknowledges that Idswyft is not feature- or metric-equivalent to mature vendors such as Jumio or Onfido.Read 15 Oct 2026 · reddit.com

Liveness

Passive and head-turn liveness modes are offered with anti-spoof scoring for photos, screens and masks.Read 15 Oct 2026 · idswyft.app

Minimum server

Documented minimum self-hosted resources are 2 vCPUs, 4 GB RAM and 20 GB disk.Read 15 Oct 2026 · github.com

News: initial release

The API changelog dates the initial public release, including OCR, face matching, REST workflows, API keys, webhooks, sandbox mode and rate limiting, to 2025-12-01.Read 15 Oct 2026 · idswyft.app

News: latest documented change

The changelog records version 1.8.3 on 2026-04-09, including a fix for recursive compliance authentication and changes to compliance authorization.Read 15 Oct 2026 · idswyft.app

OCR

Its document pipeline uses PaddleOCR and Tesseract to extract identity fields such as name, birth date, document number, expiry and address.Read 15 Oct 2026 · idswyft.app

Operating systems

The repository documents Linux, macOS and Windows with Docker Desktop, recommending Linux for production.Read 15 Oct 2026 · github.com

PEP screening

Names can be screened against politically exposed person data through OpenSanctions.Read 15 Oct 2026 · idswyft.app

Runtimes

The SDK runtime supports Node, Bun, and browsers.Read 1 Oct 2026 · idswyft.app

SDK

The first-party JavaScript package @idswyft/sdk provides TypeScript types, a React component, an iframe embed and streamed progress events.Read 15 Oct 2026 · idswyft.app

Security and privacy

Official materials state configurable retention, GDPR and CCPA handling, HTTPS-only communication, audit logs and face-embedding removal before persistence.Read 15 Oct 2026 · idswyft.app

Self-hosting

The Community Edition runs with Docker Compose using PostgreSQL, an ML engine, an API service and a React portal.Read 15 Oct 2026 · github.com

Tamper detection

Error-level analysis, entropy mapping and FFT spectral analysis are used to detect manipulated documents.Read 15 Oct 2026 · idswyft.app

Use cases

The product targets fintech, marketplaces, gig platforms, crypto and Web3, and healthcare applications.Read 1 Oct 2026 · idswyft.app

Verification pipeline

One verification call runs document OCR, cross-validation, liveness detection, and face matching.Read 1 Oct 2026 · idswyft.app

Voice authentication

An optional voice step uses a random-digit challenge, speech transcription and 512-dimensional speaker embeddings.Read 15 Oct 2026 · idswyft.app

Webhooks

Webhook delivery includes retry handling, delivery status tracking and HMAC-SHA256 signing.Read 15 Oct 2026 · idswyft.app

Plans and prices

Every Idswyft plan and price →

Where Specifiction places it

• Identity Verification Software#3 of 529.1