STAMPT API Reference

Authentication

All API requests are made to:

https://api.stampt.tech

Authenticate using your API key in the request header:

Authorization: Bearer sk_live_your_secret_key
Content-Type: application/json

API Keys

Test Mode Live

Use test mode to integrate without real bank connections. All test mode requests use pk_test_ or sk_test_ keys and return deterministic mock responses.

Test Mode Behavior

Test Emails → GEM Tiers

Use these emails in test mode to trigger specific GEM tiers:

// Test mode email → tier mapping
amber@test.stampt.tech   → Amber  (score: 25)
ruby@test.stampt.tech    → Ruby   (score: 45)
emerald@test.stampt.tech → Emerald (score: 72)
diamond@test.stampt.tech → Diamond (score: 95)
any-other@example.com    → Topaz  (score: 55)

Quickstart

Add bank-verified identity to your site in three lines of code.

<!-- 1. Add the SDK -->
<script src="https://stampted.com/stampt-verify.js"></script>

<!-- 2. Add a container -->
<div id="verify"></div>

<!-- 3. Initialize -->
<script>
  const stampt = StamptVerify.init({
    publishableKey: 'pk_test_your_key'
  });
  stampt.mount('#verify');
  stampt.on('verified', (result) => {
    console.log(result.stamptId);  // STMPT-I-XXXXXXXX
    console.log(result.gemTier);   // emerald
    console.log(result.token);     // verification token
  });
</script>

Server-Side Validation

Always validate the verification token server-side before trusting it.

const response = await fetch('https://api.stampt.tech/api/sso/userinfo', {
  headers: {
    'Authorization': `Bearer ${token}`
  }
});

const user = await response.json();
// { stampt_id, gem_tier, verified: true }

Create Link Token Live

{
  "success": true,
  "link_token": "link-production-a9a8317a-...",
  "expiration": "2026-08-08T02:24:47Z"
}

Exchange Token Live

{
  "success": true,
  "stampt_id": "STMPT-I-A7K3M9X2",
  "gem_tier": "emerald",
  "total_liquidity": 350000,
  "verified_at": "2026-08-07T19:30:00Z"
}

User Info Live

{
  "stampt_id": "STMPT-I-A7K3M9X2",
  "gem_tier": "emerald",
  "verified": true,
  "verified_at": "2026-08-07T19:30:00Z"
}

Age Gate Live

{
  "success": true,
  "verified": true,
  "meets_age_requirement": true,
  "min_age": 21,
  "stampt_id": "STMPT-I-A7K3M9X2"
}

Trust Score Beta

{
  "success": true,
  "stampt_id": "STMPT-I-A7K3M9X2",
  "score": 78,
  "tier": "emerald",
  "risk_level": "low",
  "verified": true
}

SSO / OAuth 2.0 Live

Full OAuth 2.0 authorization code flow for enterprise partners who want STAMPT as their identity provider.

Webhooks Live

STAMPT sends webhook events to your registered URL when verification events occur. Configure your webhook URL in the partner dashboard at partner.stampt.tech.

Events

Webhook Payload

{
  "event": "verification.completed",
  "data": {
    "stampt_id": "STMPT-I-A7K3M9X2",
    "gem_tier": "emerald",
    "verified_at": "2026-08-07T19:30:00Z",
    "client_id": "GRATON-EVOTLX"
  },
  "timestamp": "2026-08-07T19:30:01Z"
}

Signature Verification

Each webhook includes a X-STAMPT-Signature header containing an HMAC-SHA256 signature. Verify it against your webhook secret to ensure authenticity.

const crypto = require('crypto');

const sig = req.headers['x-stampt-signature'];
const expected = crypto
  .createHmac('sha256', process.env.WEBHOOK_SECRET)
  .update(JSON.stringify(req.body))
  .digest('hex');

if (sig !== expected) {
  return res.status(401).json({ error: 'Invalid signature' });
}

JavaScript Embed SDK

The fastest way to add STAMPT Verify to any website. One script tag, three lines of code.

API Reference

Verified Result Object

{
  "token":    "STMPT-I-A7K3M9X2",   // validate server-side
  "stamptId": "STMPT-I-A7K3M9X2",   // user's STAMPT ID
  "gemTier":  "emerald",             // financial trust tier
  "verified": true
}

WordPress Plugin

Install from the WordPress Plugin Directory. Search "STAMPT Verify" or upload the plugin zip manually.

Settings → STAMPT Verify → paste your publishable key → choose where to show the button (login, registration, comments, WooCommerce checkout, or anywhere via [stampt_verify] shortcode).

Shopify App

Install from the Shopify App Store. The STAMPT Verify app adds a verification button to your checkout flow. Configure placement (checkout, account creation, or both) and age gate settings from the app dashboard.

Error Codes

Rate Limits

Rate limit status is returned in response headers: X-RateLimit-Remaining, X-RateLimit-Reset.

GEM Tiers

Every verified user is assigned a GEM tier based on their total bank liquidity. Tiers enable risk-aware decisions without exposing exact financial data.