---
title: "Verify EVM challenge"
method: POST
path: "/challenge/verify/evm"
tags: ["Challenge"]
---

# Verify EVM challenge

`POST /challenge/verify/evm`

## Request body

- EvmCompleteChallengeRequestDto
  - `message` string, required — Message that needs to be signed by the end user.
  - `signature` string, required — EIP-191 compliant signature signed by the Ethereum account address requesting authentication.

## Response `201`

The token to be used to call the third party API from the client

- EvmCompleteChallengeResponseDto
  - `id` string, required — 17-characters Alphanumeric string Secret Challenge ID used to identify this particular request. Is should be used at the backend of the calling service to identify the completed request.
  - `domain` string, hostname, required — RFC 4501 dns authority that is requesting the signing.
  - `statement` string — Human-readable ASCII assertion that the user will sign, and it must not contain ` `.
  - `uri` string, uri, required — RFC 3986 URI referring to the resource that is the subject of the signing (as in the __subject__ of a claim).
  - `expirationTime` string, date-time — ISO 8601 datetime string that, if present, indicates when the signed authentication message is no longer valid.
  - `notBefore` string, date-time — ISO 8601 datetime string that, if present, indicates when the signed authentication message will become valid.
  - `resources` string[] — List of information or references to information the user wishes to have resolved as part of authentication by the relying party. They are expressed as RFC 3986 URIs separated by ` - `.
  - `version` string, required — EIP-155 Chain ID to which the session is bound, and the network where Contract Accounts must be resolved.
  - `nonce` string, required
  - `profileId` string, required — Unique identifier with a length of 66 characters
  - `chainId` '1' | '5' | '10' | '25' | '56' | '97' | '100' | '137' | '250' | '338' | '420' | '1284' | '1285' | '1337' | '8453' | '43113' | '43114' | '80001' | '80002' | '84531' | '88888' | '11155111', required — EIP-155 Chain ID to which the session is bound, and the network where Contract Accounts must be resolved.
  - `address` string, required — Ethereum address performing the signing conformant to capitalization encoded checksum specified in EIP-55 where applicable.

---

[API](https://skmtc.dev/moralis/apis/auth-api.md) · [All operations](https://skmtc.dev/moralis/apis/auth-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/moralis/auth-api/revisions/f54aabf6dd91/schema)