# VerifyHuman — app + API domain (vhuman.riwi.com)

> AI-resistant respondent verification. This is the application + API + MCP
> domain. An AI agent integrating VerifyHuman connects its MCP client here and
> reads the live docs below. (Marketing / product overview lives on
> https://verifyhuman.riwi.com and its /llms.txt.)

VerifyHuman verifies that survey/panel respondents are real humans using
multi-signal liveness (behavioral, device, session, and optional biometric
signals). It runs before the respondent answers — pre-survey, not post-hoc.

## MCP server (for AI agents)

- Endpoint: https://vhuman.riwi.com/mcp (hosted, OAuth 2.1 + PKCE, zero-install)
- Add it: `claude mcp add verifyhuman https://vhuman.riwi.com/mcp`
- 34 tools spanning projects, API keys, webhooks, widget config, analytics,
  organizations, signing keys, demo keys, per-question events, and the full
  Server-Side (VH-Lite) fraud-gate journey — including `lite_integration_guide`
  (the in-band Server-Side integration contract), `lite_create_project`,
  `lite_set_thresholds` (calibration WRITE), `lite_ground_truth`, and
  `lite_threshold_recommendations`.
- OAuth discovery metadata:
  https://vhuman.riwi.com/api/v1/.well-known/oauth-authorization-server
- OpenAPI schema: https://vhuman.riwi.com/api/v1/openapi.json

## Canonical references (live docs, this domain)

- https://vhuman.riwi.com/docs — integrator + AI-agent docs landing
- https://vhuman.riwi.com/docs/sdk — SDK reference (TypeScript / React / CDN)
- https://vhuman.riwi.com/docs/api — REST API reference
- https://vhuman.riwi.com/docs/mcp — MCP server install + tool spec
- https://vhuman.riwi.com/docs/webhooks — webhook contract

## Integration paths

- **MCP** — hosted Model Context Protocol server at /mcp (above); an older
  stdio-transport package `@verifyhuman/mcp` also exists for air-gapped use.
- **SDK** (`@verifyhuman/sdk`) — TypeScript / React / vanilla JS / CDN.
- **REST API** — server-to-server verification (`/api/v1/verify`, `/token/verify`).
- **Server-Side (VH-Lite)** — score a session from your backend, no page JS
  (`POST /api/v1/lite/score`); you enforce the banded recommendation.
- **Webhooks** — HMAC-SHA256-signed verification result delivery.

## Privacy

- No face images are ever stored or transmitted; only a 128-dimensional,
  non-reversible geometric fingerprint is persisted. GDPR compliant by design.

## Naming discipline

- "VerifyHuman" — the product (always one word, capital V capital H).
- "RIWI" — the parent company and platform (all caps).
- "CoolTool" — sister product, behavioral measurement.

## Contact

- ask@riwi.com
- https://riwi.com/contact