# Contra Intelligence > The compliance layer for the agentic economy. ZK-verified human ↔ agent binding, on-chain credentials, regulator disclosure. ## Docs - [Create Application](https://docs.usecontra.xyz/api-reference/auth-api/create-application.md): Spin up a new application under your organization — each one gets its own api_key, webhook config, and billing scope. - [Get Credentials](https://docs.usecontra.xyz/api-reference/auth-api/get-credentials.md): Fetch a specific application's client_id + api_key. Use after Login if you've lost your key. - [Login](https://docs.usecontra.xyz/api-reference/auth-api/login.md): Re-authenticate an existing account when your access_token expires. - [Register Account](https://docs.usecontra.xyz/api-reference/auth-api/register-account.md): Self-serve developer signup — any email works. Returns immediately, OTP arrives by email. - [Update Application](https://docs.usecontra.xyz/api-reference/auth-api/update-application.md): Rename an application, rotate its key, or update settings. - [Verify Email](https://docs.usecontra.xyz/api-reference/auth-api/verify-email.md): Submit the OTP from your inbox. Returns access_token, refresh_token, and your first application's api_key. - [Authentication](https://docs.usecontra.xyz/api-reference/authentication.md): x-api-key for /v1 · x402 for agentic · x-admin-token for on-chain issuance (operator only). - [Get Credit Balance](https://docs.usecontra.xyz/api-reference/billing/balance.md): Read the current credit balance + auto-refill configuration for the calling tenant. - [Top Up Credits](https://docs.usecontra.xyz/api-reference/billing/top-up.md): Create a Stripe checkout session to add credits. - [Check compliance (free)](https://docs.usecontra.xyz/api-reference/compliance/check.md): Free on-chain read mirror — answer 'is this address/agent verified?' for any caller. - [Errors](https://docs.usecontra.xyz/api-reference/errors.md): 400 · 401 · 403 · 404 · 422 · 429 · 500. - [AML Screening](https://docs.usecontra.xyz/api-reference/identity/aml-screening.md): Screen a name + DOB against 1,300+ sanctions, PEP, and adverse-media databases. - [Face Match](https://docs.usecontra.xyz/api-reference/identity/face-match.md): Compare two faces and return a similarity score 0–100. - [ID Verification API](https://docs.usecontra.xyz/api-reference/identity/id-verification.md): Standalone document verification — OCR, MRZ, NFC. Use when you only need a single document check (no full workflow). - [Proof of Address API](https://docs.usecontra.xyz/api-reference/identity/proof-of-address.md): Verify a utility bill, bank statement, or government letter — OCR extraction + geocoding + name match. - [KYC catalog (free)](https://docs.usecontra.xyz/api-reference/kyc/catalog.md): Country × ID-type matrix for rendering the verification UI. - [Create List Entry](https://docs.usecontra.xyz/api-reference/lists/create-entry.md): Add a document number, phone, email, or face hash to a list. - [Delete List Entry](https://docs.usecontra.xyz/api-reference/lists/delete-entry.md): Remove an entry — instantly stops gating future verifications. - [List Entries](https://docs.usecontra.xyz/api-reference/lists/list-entries.md): Paginated entries inside a specific list. - [List Lists](https://docs.usecontra.xyz/api-reference/lists/list-lists.md): Enumerate every list (built-in and custom) visible to the current tenant. - [Lists Overview](https://docs.usecontra.xyz/api-reference/lists/overview.md): Blocklists, allowlists, watchlists — face / document / phone / email entries that automatically gate future verifications. - [Upload Face](https://docs.usecontra.xyz/api-reference/lists/upload-face.md): Add a face image to a face list — the biometric template is hashed and stored irreversibly. - [Management API Overview](https://docs.usecontra.xyz/api-reference/management-api-overview.md): Account, workflow, webhook, and billing administration — everything an enterprise tenant needs to manage their Contra integration. - [API · Overview](https://docs.usecontra.xyz/api-reference/overview.md): Base URL · auth · idempotency · errors · rate limits. - [Create session](https://docs.usecontra.xyz/api-reference/sessions/create.md): Start a verification session for one of your users. - [Delete Session](https://docs.usecontra.xyz/api-reference/sessions/delete.md): Soft-delete a session — removes all associated personal data. The on-chain credential (if any) is unaffected. - [Generate PDF Report](https://docs.usecontra.xyz/api-reference/sessions/generate-pdf.md): Generate an audit-grade PDF of a session — useful for compliance archives or regulator submission. - [Get session](https://docs.usecontra.xyz/api-reference/sessions/get.md): Return the session's current status + node results. - [Get decision](https://docs.usecontra.xyz/api-reference/sessions/get-decision.md): Fetch the final verdict + ContraToken if approved. - [Import Shared Session](https://docs.usecontra.xyz/api-reference/sessions/import-shared.md): Redeem a share token to clone a partner's verification into your application. - [List sessions](https://docs.usecontra.xyz/api-reference/sessions/list.md): List + filter by status, workflow_id. - [Sessions Overview](https://docs.usecontra.xyz/api-reference/sessions/overview.md): Each session is one verification run for a user or business. Lifecycle, statuses, idempotency, sharing — all explained here. - [Share Session](https://docs.usecontra.xyz/api-reference/sessions/share.md): Mint a one-time share token so a partner platform can import this completed verification. - [Update Session Data](https://docs.usecontra.xyz/api-reference/sessions/update-data.md): Patch extracted KYC or Proof-of-Address data on a session — corrections, manual overrides, redactions. - [Update Session Status](https://docs.usecontra.xyz/api-reference/sessions/update-status.md): Override a session's status — approve, decline, or request resubmission. - [Create Webhook Destination](https://docs.usecontra.xyz/api-reference/webhooks/create.md): Register a new endpoint to receive Contra events. - [Delete Webhook Destination](https://docs.usecontra.xyz/api-reference/webhooks/delete.md): Remove a destination. Cannot be undone. - [Get Webhook Destination](https://docs.usecontra.xyz/api-reference/webhooks/get.md): Inspect one destination by UUID. - [List Webhook Destinations](https://docs.usecontra.xyz/api-reference/webhooks/list.md): Return all webhook destinations configured for the current tenant. - [Update Webhook Destination](https://docs.usecontra.xyz/api-reference/webhooks/update.md): Change the URL, version, event subscription, or rotate the signing secret. - [Create workflow](https://docs.usecontra.xyz/api-reference/workflows/create.md): Compose a custom verification recipe. - [Delete workflow](https://docs.usecontra.xyz/api-reference/workflows/delete.md): Remove a custom recipe. - [Workflow Feature Configs](https://docs.usecontra.xyz/api-reference/workflows/feature-configs.md): Per-node config — thresholds, retries, accepted document types, jurisdictional restrictions. - [Get workflow](https://docs.usecontra.xyz/api-reference/workflows/get.md): Inspect one recipe by id. - [List workflows](https://docs.usecontra.xyz/api-reference/workflows/list.md): Return the 5 built-in workflows plus any custom workflows owned by the calling tenant. - [Workflows Overview](https://docs.usecontra.xyz/api-reference/workflows/overview.md): Verification recipes — the 5 built-ins, how to compose your own, and how feature configs tune each node. - [Update workflow](https://docs.usecontra.xyz/api-reference/workflows/update.md): Patch a custom recipe (rename / change nodes). Built-ins are read-only. - [Changelog](https://docs.usecontra.xyz/changelog.md): What's new in Contra Intelligence. - [Architecture](https://docs.usecontra.xyz/concepts/architecture.md): How Contra binds verified humans to on-chain agents — ZK-private, regulator-disclosable. - [Compliance Levels](https://docs.usecontra.xyz/concepts/compliance-levels.md): From basic (KYC only) through enhanced (biometric) to institutional (+ address + email). - [ContraToken](https://docs.usecontra.xyz/concepts/contra-token.md): The signed JWT every agent transaction carries — compliance attestations, no PII. - [On-chain Credential](https://docs.usecontra.xyz/concepts/on-chain-credential.md): How an approved session becomes a ZK-proved record on the canonical ERC-8004 IdentityRegistry. - [Sessions](https://docs.usecontra.xyz/concepts/sessions.md): One verification run for a developer's user. Idempotent on (workflow_id, vendor_data) while active. - [Workflows](https://docs.usecontra.xyz/concepts/workflows.md): A workflow is an ordered list of verification nodes. Pick a built-in or compose your own. - [A2A](https://docs.usecontra.xyz/integrate/a2a.md): Agent-to-agent envelope · how a calling agent discovers + invokes Contra as a skill. - [API Keys](https://docs.usecontra.xyz/integrate/api-keys.md): Tenant-scoped keys for multi-user developers. Issued via the Auth API or your dashboard. - [MCP Server](https://docs.usecontra.xyz/integrate/mcp-server.md): Contra exposes the identity API as MCP tools so any AI agent can call them as native capabilities. - [Integrate · Overview](https://docs.usecontra.xyz/integrate/overview.md): Choose your entrypoint: api-key (multi-tenant) · x402 (agentic) · MCP tools (agents). - [SDKs](https://docs.usecontra.xyz/integrate/sdks.md): Official @contra/client (TypeScript) wraps the REST surface. - [Webhooks](https://docs.usecontra.xyz/integrate/webhooks.md): Configure where Contra POSTs session status transitions. Multiple destinations supported. - [x402 (Agentic Pay-per-Call)](https://docs.usecontra.xyz/integrate/x402.md): The account-less front door. Wallet = tenant. Pay USDC per call. No signup. - [Welcome to Contra](https://docs.usecontra.xyz/introduction.md): The compliance layer for the agentic economy — ZK-verified human ↔ agent binding, on-chain credentials, and the only permissioned regulator-disclosure path. - [Quickstart](https://docs.usecontra.xyz/quickstart.md): From zero to a verified agent in 5 API calls. ## OpenAPI Specs - [openapi](https://docs.usecontra.xyz/api-reference/openapi.json)