Checking a user's status: GET /api/v1/core/kyc/status returns the verification state of a Core ID, together with a numeric trust_score and the date of the last_audit.
The three verification levels:
unverified (Basic): No identity verification has taken place yet.
pending (In Review): Verification has been submitted and is currently being processed.
verified (Trust Level 1+): The identity has passed verification and carries an associated trust score.
Reading the response: A verified user returns something like { "kyc_status": "verified", "trust_score": 85, "last_audit": "2026-01-15" } — giving your application both a simple status flag and a more granular trust signal to build logic around.
Why this matters for developers: Rather than building your own identity verification pipeline, you can read a user's existing KYC status and trust score directly through the API and decide what level of access or trust to grant them inside your own app.
Permission required: Reading KYC and trust score data requires the core:read:sensitive scope, since this is more sensitive than basic profile information — request it explicitly during the OAuth authorize step.