Explore the docs.
Start building.

# Enrollment — capture stays on-device;
# only a SensePrint is sent
POST /v1/enroll
  { "sense_print": "<encrypted, revocable>" }

# Derive a per-purpose keypair from a live capture,
# then sign
POST /v1/sign
  { "challenge": "<nonce>", "capture": "<on-device>" }
# → { "signature": "...", "alg": "ML-DSA" }
# the key has ceased to exist

# Verify with a prepared supported verifier —
# including offline
POST /v1/verify
  { "credential": "<sense_print>", "signature": "..." }
# → { "valid": true }
# same call against the hosted API
# or your own deployment

from sensecrypt import Client

c = Client(api_key=...)
# Enrollment returns only a revocable SensePrint
sp = c.enroll(capture=on_device_capture())

# Derive from a live capture, sign, discard —
# no key at rest
sig = c.sign(challenge, capture=on_device_capture())
assert c.verify(credential=sp, signature=sig)
# face-derived signing key discarded;
# enrollment artifacts may persist

import SenseCrypt

let c = SenseCryptClient(apiKey: apiKey)
// returns a SensePrint only
let sp  = try c.enroll(capture: capture)
// key derived, used, discarded
let sig = try c.sign(challenge, capture: live)
// verifies offline with a prepared
// supported verifier
let ok  = try c.verify(credential: sp, signature: sig)
// FIPS 203 / 204 live in PKI —
// see the architecture whitepaper