GuidesAPI ReferenceChangelog
API Reference

Upload Document

Upload a document file for an existing application. Files are uploaded as raw binary in the request body.

Document Types

  • selfie — Front-facing photo (required)
  • liveness — Liveness check image/video (required)
  • id_front — Front of identity document (required)
  • id_back — Back of identity document (required for drivers_license/national_id)
  • poa — Proof of address document (required when due_diligence.proof_of_address is provided)

Allowed Content Types

Document TypeAllowed Content-Types
selfie, id_front, id_backimage/jpeg, image/png, application/pdf
livenessimage/jpeg, image/png, video/mp4
poaimage/jpeg, image/png, application/pdf

File Size Limits

Document TypeMax Size
selfie, id_front, id_back, poa10 MB
liveness20 MB

Security

  • File content is validated using magic bytes to prevent MIME type spoofing (e.g., uploading HTML/JS disguised as JPEG)
  • PDF files are scanned for embedded JavaScript, Launch actions, and other dangerous patterns

Rules

  • Request body must be raw binary (not Base64, not multipart)
  • Re-uploading the same document type replaces the previous file
  • Upload is only allowed when status is DRAFT or ACTION_REQUIRED

After uploading all required documents (when pending_documents is empty), call Submit Application to trigger risk assessment.

Language
Credentials
Bearer
OneMoney-HMAC-SHA256
Response
Click Try It! to start a request and see the response here!