VoiceChain API

Voice Authentication — API Reference (WIP)

This documentation is a work in progress. Endpoints and types may change.

Overview

VoiceChain provides voice-based identity verification through two complementary APIs: a REST API for AI agent integrations and a GraphQL API for end-user clients.

GraphQL: /graphql | REST: /api/v1/...

Architecture

Agent Gateway (REST)

Server-to-server API. Agents create challenges, poll status, and receive signed trust tokens.

Auth: Agent API Key (Bearer)

User API (GraphQL)

User-facing API for account management, voice enrollment, agent registration, and responding to challenges.

Auth: JWT (Bearer)

Typical Flow

  1. 1 User enrolls their voice via enrollVoice mutation
  2. 2 Agent calls POST /api/v1/challenge — policy engine evaluates the request
  3. 3 If challenge_pending: user is prompted to verify their voice
  4. 4 User responds via POST /api/v1/challenge/:id/respond with an audio sample
  5. 5 Agent receives a signed JWT trust token with the granted authorization level