---
title: "Batch verify credentials"
method: POST
path: "/verify/batch"
tags: ["Verification"]
---

# Batch verify credentials

`POST /verify/batch`

## Request

- Base URL: `https://app.arkova.ai/api/v1`
- URL: `https://app.arkova.ai/api/v1/verify/batch`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

Verify multiple credentials in a single request. Synchronous for ≤20 items, async for >20 (returns job_id).

## Request body

- object
  - `public_ids` string[], required: Array of credential public IDs to verify

## Response `200`

Synchronous batch results (≤20 items)

- BatchResponse
  - `results` object[]
    - `verified` boolean, required
    - `status` 'ACTIVE' | 'REVOKED' | 'SUPERSEDED' | 'EXPIRED' | 'PENDING' | 'SUBMITTED'
    - `issuer_name` string
    - `recipient_identifier` string: Hashed identifier, never raw PII
    - `credential_type` string
    - `issued_date` string, date-time, nullable
    - `expiry_date` string, date-time, nullable
    - `anchor_timestamp` string, date-time, nullable: Network Observed Time: the moment the Bitcoin network observed this anchor. Measured from the confirmed block, NOT the time the record was created in Arkova (the two differ by the confirmation interval). Semantic search retains this key with null when no observation exists; exact-id verification omits it in that case. Not asserted: anything about the content, authenticity, or legal effect of the underlying document.
    - `bitcoin_block` integer, nullable
    - `network_receipt_id` string, nullable
    - `merkle_proof_hash` string, nullable
    - `record_uri` string, uri
    - `jurisdiction` string: Omitted when null, never returned as null
    - `description` string: Immutable credential description, omitted when not present
    - `proof_availability` 'per_document' | 'root_only': SCRUM-2575. Whether a per-document proof can actually be retrieved for this record. `per_document` = a per-document inclusion branch is stored and GET /verify/{publicId}/proof returns it. `root_only` = no per-document branch is stored; the fingerprint is committed on-chain via the referenced anchor receipt, but no self-contained offline proof bundle is available. Measured from stored proof data — never derived from status. Omitted (never null) for records that have not reached a settled on-chain state (PENDING / SUBMITTED). Additive field (Constitution 1.8); no API version change.
    - `proof_availability_note` string: SCRUM-2575. Omitted when not applicable, never returned as null. Present exactly when proof_availability is. States what is measured, what is asserted, and what is NOT asserted for that class (Constitution 1.5) — in particular, for root_only records, that no self-contained per-document offline proof is available, and that its absence is not evidence the record is invalid.
    - `source` object: SCRUM-4507. Which connected document source this record originated from. OMITTED (never null, never an empty object) when the record carries no recognised connector marker — absence means "not stated", NOT "uploaded by a person". Carries the provider label and NOTHING ELSE: no file, folder, shared-drive or revision identifier and no deep link into the source system. This endpoint answers anonymously, so a source identifier here would let any holder of a public record id probe the source system for that object; those identifiers are shown only to the record owner on the authenticated record page. Not asserted: that the document still exists in the source system, is unchanged there, or is reachable by the caller — see fingerprint_rederivability for what the fingerprint does and does not commit. Additive field (Constitution 1.8); no API version change.
      - `provider` 'connector' | 'docusign' | 'google_drive' | 'microsoft_365': The connected system this record's document was retrieved from.
    - `compliance_controls` string[], nullable: API-RICH-01 regulatory control IDs mapped to this anchor. Informational metadata only — see compliance_controls_note, which is always present alongside this field and states what these identifiers do NOT assert. OMITTED for records that are not a current anchored credential (REVOKED / EXPIRED / SUPERSEDED / not yet anchored): these identifiers describe a live compliance posture, so listing them for such a record would assert something Arkova does not hold (BUG-2026-06-24-007). Absence is not a statement that the record was never anchored — the anchor receipt fields are unaffected.
    - `compliance_controls_note` string: SCRUM-2227. Omitted when not applicable, never returned as null. Present whenever compliance_controls is present, absent otherwise. States that control identifiers are a credential-type mapping and NOT an audit, certification, conformity assessment, or attestation — in particular that no identifier asserts qualified status under eIDAS. Additive nullable field (Constitution 1.8); no API version change.
    - `chain_confirmations` integer, nullable: API-RICH-01 Bitcoin block confirmations at anchor time.
    - `parent_public_id` string, nullable: API-RICH-01 public ID of the parent anchor; internal UUIDs are never exposed.
    - `version_number` integer, nullable: API-RICH-01 version in this anchor lineage; omitted when equal to 1.
    - `revocation_tx_id` string, nullable: API-RICH-01 Bitcoin transaction ID of the revocation when status is REVOKED.
    - `revocation_block_height` integer, nullable: API-RICH-01 Bitcoin block height at which revocation was anchored.
    - `file_mime` string, nullable: API-RICH-01 source document MIME type.
    - `file_size` integer, nullable: API-RICH-01 source document size in bytes.
    - `confidence_scores` object, nullable: API-RICH-02 per-field confidence scores from the latest extraction manifest.
    - `sub_type` string, nullable: API-RICH-02 fine-grained credential subtype from anchors.sub_type.
    - `error` string
    - `public_id` string
  - `job_id` string, uuid
  - `total` integer

## Other responses

- `202`: Async job created (>20 items)
- `400`: Invalid request
- `401`: Authentication required
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/arkova/apis/arkova-verification-api.md) · [All operations](https://skmtc.dev/arkova/apis/arkova-verification-api/llms.txt) · [OpenAPI document](https://skmtc.dev/arkova/apis/arkova-verification-api/revisions/a14858d1efd4?raw)