lemma.id proof of humanity
Integrate verified-human credentials into your app with site-private PPIDs and local browser verification.
No webhooks to configure on your side — embed the SDK, set siteId to your hostname, and register
a site API key only when you need server-side blocks or network revocation requests.
1) Integrate
Embed the verifier SDK and gate actions with verify({ autoProvision: true }). No dashboard step required for the basic human check.
- Set
siteIdto your canonical hostname (for exampleapp.example.com). - Add
ishuman-verifier.jsand fail closed whenhumanis false. - Store the returned
ppidon your user record — no KYC fields.
2) Operate
The SDK handles IDV and site-proof derivation in a Lemma-hosted popup. Your server does not receive webhooks for verification completion.
- First visit may open a popup (wallet unlock + Didit IDV).
- Later checks validate locally — no per-page network call.
- Optional: stamp actions and re-verify on your backend with
verifyStamp().
3) Enforce bans
Use your site API key for server-side abuse response. The API key is not required for human verification itself.
POST /api/ishuman/site-block— immediate site-scoped PPID ban.POST /api/ishuman/network-revoke— request network-wide action.- Issue keys in the API key manager.
Full documentation: /docs. Legacy IAM-only consoles remain on restricted admin routes.