Disclosure tiers
Which fields a verification response carries, and what an API key changes.
Every response states which tier produced it, in disclosureTier. Read that field rather than
inferring the tier from whether you sent a key.
disclosureTier | Who gets it | What it carries |
|---|---|---|
public | Anyone, no credential required | The verdict, all four checks, the full Hedera anchor proof, revocation state and reason, live signer standing, and the signer's opt-in public hint. Enough to decide whether to trust the document. |
organisation | A valid API key on a validated organisation | Everything above, plus a durable verificationId, the environment the key belongs to, your own reference echoed back, the reconciliation log, and higher rate limits. |
What a credential does not change
The verdict. Both tiers run the same four checks against the same records and return the same answer. A credential buys accountability on your side and a higher tier of service — it does not buy a different result.
Who signed something. Signer identity is disclosed because the signer opted in, not because
the verifier authenticated. signerHint is whatever the signer chose to publish, at either tier.
While your organisation is being validated
Your keys work, and are served at the public tier. Nothing is refused and no key needs
replacing — you keep the same key through validation, and it moves to organisation automatically
once validation completes.
Until then:
verificationId,environmentandreferenceare absent from responses. Code that dereferences them unconditionally will break.- The two read operations — listing verifications and reading one back — return
403. The reconciliation log is what theorganisationtier adds, and apublic-tier response carries noverificationIdto read back. - Anonymous rate limits apply. See Errors.
Your verifications are recorded throughout. The log is populated from the moment you started, not from the moment you were validated.
Fields by tier
| Field | public | organisation |
|---|---|---|
verdict, assuranceLevel, mode, originalDocHash, verifiedAt, matches | Present | Present |
disclosureTier | public | organisation |
retryAfterSeconds | On pending_anchor from a verification | On pending_anchor from a verification |
verificationId | Absent | Present |
environment | Absent | Present |
reference | Absent | Present when you sent one |