Get a device attestation challenge
Generates a one-time challenge used by the mobile SDK to request a device attestation from Apple App Attest or Google Play Integrity. The challenge expires after 5 minutes and is single-use.
Authenticated by capture session token.
Authentication
X-API-Keystring
Organization API key. Keys are prefixed with vk_live_ (production) or
vk_sandbox_ (sandbox).
Headers
Verifa-Version
API version date string (e.g. 2026-02-01). If omitted, the version
pinned to your API key is used.
Query parameters
token
Response
Challenge issued.
challenge
Errors
400
Bad Request Error