Build with
proof of human.

Quickstart with curl

Sign up, verify, done. Auth is a single Bearer key. The Free plan includes 1,000 signed credentials a month, no card required; paid plans raise the ceiling.

# 1) Sign up → get your API key (shown once)
curl -X POST https://api.5arz.com/api/agents/register \
  -H "Content-Type: application/json" \
  -d '{"name":"Your Company","contactEmail":"you@company.com"}'

# 2) Optional: pick a paid plan → open the returned Stripe checkout
curl -X POST https://api.5arz.com/api/billing/checkout \
  -H "Authorization: Bearer arz_live_…" -d '{"plan":"starter"}'

# 3) Verify an event → a signed credential (one seal against your plan)
curl -X POST https://api.5arz.com/api/agents/verify \
  -H "Authorization: Bearer arz_live_…" -d '{"sessionId":"…"}'
# → { "pohf_jwt": "eyJ…", "verified": true }

Get your API key

Self-serve and instant. Your key is shown once — store it.

Start in Test mode: a free arz_test_ key with unlimited, uncharged verifications, so you can integrate end-to-end before paying. Test credentials are signed but carry test:true — never treat them as production proof.

A thin JavaScript client for browsers and Node 18+. Import it directly, or copy the file into your project.

// import directly (browser ESM or bundler)
import { Sarz } from "https://5arz.com/sdk/sarz.js";

const sarz = new Sarz({ apiKey: "arz_live_…" });
const { pohf_jwt } = await sarz.verify(sessionId);        // 1 seal → signed credential

// physical presence (receipt / on-site)
const photoHash = await Sarz.hashPhoto(file);
const { lat, lng } = await Sarz.captureGeo();
await sarz.submitPhysical({ memberId, source:"receipt", lat, lng, photoHash });

// your advertisers verify it themselves — no key needed
const { valid, payload } = await Sarz.verifyCredential(pohf_jwt);

npm i @5arz/sdk · or hosted at 5arz.com/sdk/sarz.js.

Endpoints

Base URL https://api.5arz.com. Auth: Authorization: Bearer <apiKey> (all but register + jwks).

The full list, with schemas, is in the OpenAPI spec.

Verify a credential (the buyer side)

Every 5arz credential is an ES256 JWT. Your advertisers and partners verify it themselves with any standard JWT library, or our SDK.

import { Sarz } from "https://5arz.com/sdk/sarz.js";
const { valid, payload } = await Sarz.verifyCredential(pohf_jwt);
// valid === signature OK + iss is 5arz + not expired

Prefer no code? Paste any credential into the in-browser verifier.

Post-click tracking

One tag adds a signed credential to each on-site action and conversion, so each carries proof it came from a verified human. It augments your analytics; it doesn’t replace them.

Cookieless. Redirect verified click-throughs with ?sarz_vt=<attestationId>.

<!-- drop on the advertiser site -->
<script src="https://5arz.com/sdk/track.js" data-site="agt_your_id" async></script>

// fire a conversion anytime (value optional)
sarz("conversion", "purchase", { value: 49, currency: "USD" });

Captures on-site engagement (active time, scroll, clicks) tied to the verified view. Backend conversion? Use server-side POST /api/agents/track/conversion. See the funnel at GET /api/agents/metrics/funnel.

In-break task widget

Turn idle moments — a video break, a loading screen — into verified human work. The viewer completes a quick task in a pop-up and earns Stars.

A verified completion mints a signed PoHF a buyer can pay for.

<!-- on the partner page -->
<script src="https://5arz.com/sdk/task-widget.js" data-site="agt_your_id" async></script>

// during a 60-second break:
SarzTask.open({ vt: viewToken, member: viewerId, onComplete: function(r){ } });

Mint the credential from a verified completion: POST /api/agents/verify with { sessionId: completionId } → a signed PoHF (work_kind task).

Mobile and apps

Everything works on mobile web and inside native iOS, Android and React Native apps.

• React Native / Node — the SDK is pure fetch + WebCrypto, no DOM. Call verify(), credits, metrics() as usual; pass photoHash/lat/lng from native capture.
• Native device attestation — use app_attest (iOS) or play_integrity (Android) at /api/agents/attest/verify to prove a genuine app, not an emulator. WebAuthn covers mobile web.
• Native in-break tasks — no iframe needed: GET /api/tasks/next, render in your own UI, then POST /api/tasks/complete with dwellMs/focusedMs + the viewer’s memberRef. A verified completion credits Stars.
• Cross-device — pass the same stable uref (your viewer id) on verify and on the tag (data-user) across phone, web and app, so each viewer id counts once and conversions attribute across devices.

Bind a verified, live human to a wallet, so DeFi and RWA protocols can gate borrowers and depositors on real personhood.

Get a challenge, sign it with the wallet, then mint a personhood credential carrying the wallet claim.

// 1) challenge
POST /api/agents/wallet/challenge  -> { nonce, message }
// 2) wallet.personal_sign(message) -> walletSig
// 3) bind
POST /api/agents/verify-personhood  { memberId, wallet, walletSig, walletNonce: nonce }
   -> pop_jwt with claims: wallet, wallet_proof:"eip191", sybil_checked, liveness

On-chain consumers read it via a 5arz attestation/registry — require(sarz.isVerifiedHuman(wallet)). Reference contract + EAS schema in our onchain/ kit.

Auth, credits and errors

• Auth — one Bearer API key per company. Keys are shown once at creation; rotate by registering again.
• Test mode — an arz_test_ key (register with mode:"test") verifies for free and unlimited, and mints credentials marked test:true / env:"test". Integrate and validate end-to-end, then switch to a live key to go to production.
• Plans — Free: 1,000 seals/mo + 10 document checks. Then Starter $99, Growth $499, Scale $2,499 per month. Each verify spends one seal. See pricing.
• Errors — JSON { ok:false, error }. 401 bad/no key, 402 monthly allowance used (includes an upgrade link), 404 not found.
• Standards — credentials follow Verifiable Intent / Visa Trusted Agent conventions and bind to payments on Agent Pay, Stripe, or USDC. 5arz is never in the payment path.