---
title: "Submit Attestation"
method: POST
path: "/api/v1/sdk/attest"
tags: ["sdk"]
---

# Submit Attestation

`POST /api/v1/sdk/attest`

## Request

- Base URL: `https://api.withverifa.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.withverifa.com/api/v1/sdk/attest`
- Auth: none declared

Accept a device attestation submission.

Server-side verification of Apple App Attest / Google Play Integrity
payloads is not yet implemented. The endpoint validates the one-time
challenge so the SDK's attestation flow exercises the wire format, then
returns a non-committal ``status: "not_verified"`` response. **Nothing
is written to session metadata** — there is no fake "valid" claim that
a future risk rule could mistakenly trust.

## Request body

- AttestationSubmission
  - `token` string, required
  - `platform` string, required
  - `attestation_token` string, required
  - `challenge` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/withverifa/apis/verifa.md) · [All operations](https://skmtc.dev/withverifa/apis/verifa/llms.txt) · [OpenAPI document](https://skmtc.dev/withverifa/apis/verifa/revisions/7288c82c9e33?raw)