API pública de verificación

curl "https://pulseids.com/api/verify?s=<sealHash>"

{
  "valid": true,
  "source": "database",
  "certificateId": "a1b2c3d4e5f6a7b8",
  "issuedAt": "2026-07-10T14:32:00.000Z",
  "program": "personal"
}

{
  "valid": false,
  "error": "Sello no encontrado"
}

curl -X POST https://pulseids.com/api/verify \
  -H "Content-Type: application/json" \
  -d '{
    "token": "<header>.<payload>.<sig>",
    "did": "a1b2c3d4e5f6a7b8"
  }'

{
  "result": "VALID",
  "valid": true,
  "device_label": "Amazfit Balance",
  "payload": {
    "sub": "...",
    "iat": 1752345600000,
    "exp": 1752347400000,
    "state": "COHERENT",
    "uv": 1,
    "proof": { "chain": 4 },
    "pid": "..."
  },
  "verified_at": "2026-07-12T10:00:00.000Z",
  "message": "Identidad fisiológica verificada. Cadena criptográfica: 4 eslabones."
}

{
  "result": "INVALID_STATE",
  "valid": false,
  "payload": { "...": "..." },
  "verified_at": "2026-07-12T10:00:00.000Z",
  "message": "Estado fisiológico insuficiente: BASELINE. Se requiere COHERENT."
}

curl "https://pulseids.com/api/verify-proof?proof_ref=<proof_ref>"

{
  "ok": true,
  "proof_ref": "abc123",
  "session_id": "sess_...",
  "issuer": "amazfit_balance",
  "channel": "amazfit_balance_watchface",
  "verification_status": "valid",
  "state": "COHERENT",
  "hr_band": "60-70",
  "issued_at": "2026-07-10T14:32:00.000Z",
  "verified_at": "2026-07-12T10:00:00.000Z",
  "expires_at": "2026-08-10T14:32:00.000Z",
  "device_ref_public": "a1b2c3d4...ab12",
  "payload_hash_public": "9f8e7d6c...34ff",
  "signature_public": "3c2b1a09...ff01",
  "signature_alg": "HMAC-SHA256",
  "pdf_available": true,
  "pdf_url": "https://.../certificado.pdf",
  "verify_url": "https://pulseids.com/v/abc123",
  "safe_mode": true,
  "physiological_raw_exposed": false,
  "internal_metrics_exposed": false,
  "token_full_exposed": false,
  "error": null
}

{
  "ok": false,
  "verification_status": "not_found",
  "error": "not_found",
  "pdf_available": false
}

curl "https://pulseids.com/api/ots-verify?seal=<certificateId>"

{
  "ok": true,
  "sealId": "a1b2c3d4e5f6a7b8",
  "issuedAt": "2026-07-10T14:32:00.000Z",
  "anchored": true,
  "otsAnchoredAt": "2026-07-10T15:10:00.000Z",
  "downloadUrl": "/api/ots-download?seal=a1b2c3d4e5f6a7b8"
}

{
  "ok": true,
  "sealId": "a1b2c3d4e5f6a7b8",
  "issuedAt": "2026-07-10T14:32:00.000Z",
  "anchored": false,
  "otsAnchoredAt": null,
  "downloadUrl": null
}

curl "https://pulseids.com/api/zkbp-verify?cert=<certificateId>"

{
  "ok": true,
  "certificateId": "a1b2c3d4e5f6a7b8",
  "issuedAt": "2026-07-10T14:32:00.000Z",
  "program": "personal",
  "threshold": 0.75,
  "proto": "zkbp-secp256k1-v1",
  "available": true,
  "verified": true,
  "commitment": "02ab3c...",
  "chainHash": "9f8e7d6c...",
  "proof": {
    "proto": "zkbp-secp256k1-v1",
    "commitment": "02ab3c...",
    "bitsD": [ "/* rango-proof, ver _shared/zkbp.js */" ],
    "bitsV": [ "/* rango-proof, ver _shared/zkbp.js */" ]
  }
}

{
  "ok": true,
  "certificateId": "a1b2c3d4e5f6a7b8",
  "issuedAt": "2026-07-10T14:32:00.000Z",
  "program": "personal",
  "available": false,
  "verified": false
}

curl "https://pulseids.com/.well-known/pulseid-verify"

{
  "name": "PulseID",
  "description": "PulseID emite identidad fisiológica certificable...",
  "identifier_types": [
    { "type": "certificate_id", "format": "16 hex", "real_endpoint": { "url": ".../api/zkbp-verify?cert=..." } },
    { "type": "seal_hash", "format": "64 hex", "real_endpoint": { "url": ".../api/verify?s=..." } },
    { "type": "proof_ref", "format": "alfanumérico, sin puntos", "real_endpoint": { "url": ".../api/verify-proof?proof_ref=..." } }
  ]
}

curl "https://pulseids.com/.well-known/pulseid-verify?ref=<identificador>"

{
  "identifier_type": "certificate_id",
  "ok": true,
  "verified": true,
  "certificate_id": "a1b2c3d4e5f6a7b8",
  "issued_at": "2026-07-10T14:32:00.000Z",
  "program": "personal",
  "human_readable_summary": "Verificado: el certificado a1b2c3d4e5f6a7b8 (programa personal) prueba mediante conocimiento cero que la coherencia fisiológica de la sesión superó el umbral requerido, sin revelar el valor real.",
  "source_endpoint": "https://pulseids.com/api/zkbp-verify?cert=a1b2c3d4e5f6a7b8"
}

{
  "ok": false,
  "error": "unrecognized_identifier_format",
  "human_readable_summary": "No se reconoce el formato del identificador enviado en `ref`. Se aceptan 3 formatos...",
  "accepted_formats": [ "..." ]
}

<span data-pulseid-badge="<proof_ref>"></span>
<script src="https://pulseids.com/pulseid-badge.js" defer></script>

<span data-pulseid-badge="<proof_ref_1>"></span>
<span data-pulseid-badge="<proof_ref_2>"></span>
<script src="https://pulseids.com/pulseid-badge.js" defer></script>

<script src="https://pulseids.com/pulseid-badge-wc.js" defer></script>
<pulseid-badge proof-ref="<proof_ref>" theme="dark" size="md"></pulseid-badge>

<pulseid-badge proof-ref="<proof_ref_1>"></pulseid-badge>
<pulseid-badge proof-ref="<proof_ref_2>"></pulseid-badge>
<script src="https://pulseids.com/pulseid-badge-wc.js" defer></script>

Los cuatro endpoints no comparten un envelope único — es un rasgo de que evolucionaron por separado, no un contrato de API versionado. GET /api/verify usa { valid, ... }; los otros tres usan { ok, ... }. Si integras contra varios, no asumas el mismo campo de éxito en todos — compruébalo endpoint por endpoint contra las tablas de esta página.

Ninguno de los cuatro requiere API key hoy — son de lectura pública sobre identificadores anónimos. El único con rate limit propio es POST /api/verify (60/min por IP). Si vas a integrar tráfico de volumen (verificación en cada request de tu backend, por ejemplo), cachea por proof_ref/certificate_id en tu lado — estos identificadores son inmutables una vez emitidos.

Estos son los contratos ya en producción, documentados tal cual — no hay todavía un endpoint unificado versionado (tipo /api/v1/verify) que envuelva a los cuatro. Si tu integración necesita ese nivel de estabilidad a largo plazo, contacta antes de depender de la forma exacta de la respuesta.