Your applications

New application

The public app ID goes in your frontend; the secret stays on your server. Leave origins empty while developing, then lock it to your domains.

Quick integration

Drop this into your site, replacing the app ID with yours:

<script src="SCRIPT_ORIGIN/static/widget.js"></script>
<script>
  const vultus = new Vultus("YOUR_APP_ID");
  // at signup:
  vultus.enroll({ payload: { userId: 123 } }).then(i => save(i.facialId));
  // at login:
  vultus.authenticate().then(u => signIn(u.facialId, u.payload, u.token));
</script>

Then verify token on your backend: GET SCRIPT_ORIGIN/api/token/verify?token=… with header X-App-Secret.