@vouchsafe/node

Vouchsafe Node.js library

The Vouchsafe Node library provides convenient, typed access to the Vouchsafe API for applications written in server-side JavaScript.

Requirements

Node 18 or better.

Installation

npm install @vouchsafe/node
# or
yarn add  @vouchsafe/node

Usage

The SDK needs a client ID and secret, which is available in the Vouchsafe dashboard. Replace the values below:

import { VouchsafeClient } from "@vouchsafe/node"

const client = new VouchsafeClient({
  client_id: "YOUR_CLIENT_ID",
  client_secret: "YOUR_CLIENT_SECRET",
})

// Request a verification
const res = await client.requestVerification({
  email: "foo@bar.com",
})

console.log(res.id) // Trackable verification session ID
console.log(res.url) // Redirect the user here

List verifications

const res = await client.listVerifications({
  status: "InProgress", // Or any other supported status
})

Get a specific verification

const res = await client.getVerification({
  id: "ID",
})

console.log(res.checks) // Array of verification checks performed
console.log(res.enrichments) // Array of background checks

Download artefacts (documents, photos)

Verification responses may include artefact keys. Use these to get pre-signed download URLs:

const verification = await client.getVerification({ id: "ID" })

// Get artefact keys from checks
const photoIdCheck = verification.checks.find((c) => c.step === "photo_id")
if (photoIdCheck?.artefacts?.[0]) {
  const artefact = await client.getArtefact({
    artefact_key: photoIdCheck.artefacts[0].key,
  })

  console.log(artefact.download_url) // Pre-signed URL (time-limited)
  console.log(artefact.expires_at) // When the URL expires
}

Verify UK immigration status (eVisa)

Verify a person's immigration status, right to work, or right to rent using their Home Office share code:

const result = await client.verifyEvisa({
  sub_type: "ImmigrationStatus", // or 'RightToRent', 'ImmigrationStatus'
  payload: {
    reason: "Education or training",
    job_title: "Software Engineer",
    company_name: "Sandbox Company",
    date_of_birth: "1996-06-07",
    share_code: "PASS12345",
  },
})

console.log(result.outcome) // 'pass', 'fail', or 'error'

// Access type-specific fields based on sub_type
if (result.sub_type === 'ImmigrationStatus') {
  console.log(result.extracted_details.immigration_status) // e.g., 'Settled'
}

console.log(result.validations.evisa_exists.status) // 'pass' or 'fail'

Sandbox testing: Use these share codes in sandbox mode:

• PASS12345 - Returns successful verification
• FAIL12345 - Returns failed verification (expired status)
• ERROR1234 - Returns error response

Verify supporting documents

Extract and validate supporting documents like bank statements, utility bills, payslips:

import fs from "fs"

const fileBuffer = fs.readFileSync("./bank-statement.pdf")
const file = new File([fileBuffer], "bank-statement.pdf", {
  type: "application/pdf",
})

const result = await client.verifySupportingDocument({
  document: file,
  sub_type: "BankStatement",
  minimum_document_length: 3, // Optional: minimum age in months
})

console.log(result.outcome) // 'pass', 'fail', or 'error'
console.log(result.extracted_details.first_name)
console.log(result.extracted_details.postcode)
console.log(result.validations.document_age_valid?.status)

Supported document types:

• Financial: BankStatement, CreditCardStatement, MortgageStatement, Payslip, PensionAnnualStatement
• Utilities: UtilityBill, MobilePhoneBill
• Government: BenefitsLetter, HMPPSLetter, NHSLetter

List verification flows

const res = await client.listFlows()

Sandbox mode

Use a sandbox rather than a live client secret to activate sandbox mode on methods that support it.

Re-authentication

The client will automatically cache your access token and insert it into every request, and fetch a new one upon expiry.

If a request fails with a 401 Unauthorised error, it will fetch a new access token and retry once before throwing an error.

Multi-instance use

For best performance, you should instantiate the client once and share it across your app as a singleton.

Each time a new access token is requested using the same client credentials, it invalidates the old one.

Instantiating multiple clients can lead to:

• over-writing each other's tokens
• unnecessary retries and re-authentications.

For high-concurrency use cases, you should store the access token in a shared key-value store instead.

Handling errors

Client methods will throw an instance of VouchsafeApiError if the API returns a bad response.

You can catch them like this:

try {
  const res = await client.getVerification({
    id: "non-existent",
  })
} catch (err) {
  if (err instanceof VouchsafeApiError) {
    console.log(err.statusCode, err.message)
  }
}

Development

See the contribution guidelines for this project

Contributions including issues and pull requests are welcome.

To run the project locally, clone the repo and run:

npm install
npm run generate # regenerate from API spec
npm run build # compile typescript

Further reading

• Developer docs
• Full API endpoint reference
• 3-minute video guide