> ## Documentation Index > Fetch the complete documentation index at: https://api-portal.etoro.com/llms.txt > Use this file to discover all available pages before exploring further. # Submit trusted partner verification > **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Submits trusted partner verification for the authenticated user. When the user is already at verification level 3, returns an idempotent success response without re-processing. Otherwise requires verification level 2, uploads POI/POA trusted-partner documents, and upgrades the user to level 3. ## OpenAPI ````yaml /api-reference/partners-openapi.json post /api/v1/users/verification openapi: 3.0.1 info: title: eToro Api version: v1.342.0 description: >- eToro’s public API provides access to real-time financial data, trading insights, and account management features, allowing developers to integrate eToro’s services into their applications. With access to market prices, historical data, and social trading information, the API empowers users to enhance their trading strategies. Designed for security and scalability, the eToro API ensures smooth and reliable integration for a variety of financial applications. For more details on integrating with eToro's public WebSocket service, please refer to the dedicated [WebSocket documentation](./websocket/websocket-doc.html). ## Authentication Every request must be authenticated with exactly one of two options: an OAuth 2.0 access token (`Authorization: Bearer `), or the non-interactive credential pair (`x-api-key` + `x-user-key` headers). The two options are mutually exclusive — a request carrying both is rejected. Each operation lists the OAuth scopes that grant access as alternative security requirements: a bearer token needs only ONE of them, and the same permissions govern the credential pair. servers: - url: https://public-api.etoro.com description: eToro Public API - Partners security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: [] tags: - name: OPS - name: KYC - name: Cash Accounts - name: FTD - name: Crypto Deposit - name: Crypto Withdrawals - name: Registration - name: Sub-Accounts - name: Email Verification - name: Trusted Partner - name: Phone Verification - name: Verification paths: /api/v1/users/verification: post: tags: - Verification - Trusted Partner summary: Submit trusted partner verification description: >- **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Submits trusted partner verification for the authenticated user. When the user is already at verification level 3, returns an idempotent success response without re-processing. Otherwise requires verification level 2, uploads POI/POA trusted-partner documents, and upgrades the user to level 3. operationId: submitUserVerification parameters: - name: x-request-id in: header required: true schema: type: string format: uuid example: 970a7cb1-37e2-4c78-b12d-287e3ee85165 description: A unique request identifier. requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/DocumentsDirectUserVerificationRequest' example: verificationEvidence: partnerReferenceId: partner-ref-1 verificationMethod: sms verifiedAt: '2026-05-27T12:00:00Z' externalProviderId: provider-1 externalReferenceId: ref-1 additionalDetails: Optional notes responses: '200': description: Verification submitted successfully content: application/json: schema: $ref: '#/components/schemas/DocumentsDirectUserVerificationResponse' example: success: true data: verified: true alreadyVerified: false previousVerificationLevel: 2 verificationLevel: 3 verifiedAt: '2026-05-27T12:00:00Z' partnerVerified: true partnerReferenceId: partner-ref-1 headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 '400': description: >- Bad Request - missing or invalid verification evidence, or user not at verification level 2 content: application/json: schema: $ref: '#/components/schemas/DocumentsPublicErrorResponse' examples: missingEvidence: summary: Missing or invalid evidence value: errorCode: MISSING_EVIDENCE errorMessage: PartnerReferenceId is required. invalidVerificationLevel: summary: User not at verification level 2 value: errorCode: ValidationError errorMessage: 'User must be verification level 2. Current level: 1.' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/DocumentsPublicErrorResponse' '422': description: Unprocessable Entity - verification evidence has expired content: application/json: schema: $ref: '#/components/schemas/DocumentsPublicErrorResponse' example: errorCode: EVIDENCE_EXPIRED errorMessage: Verification evidence is older than 90 days. '429': description: Too Many Requests content: application/json: schema: $ref: '#/components/schemas/DocumentsPublicErrorResponse' headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 Retry-After: description: Seconds to wait before retrying. schema: type: integer example: 60 '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/DocumentsPublicErrorResponse' security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: - etoro-public:verification:trusted:user:write components: schemas: DocumentsDirectUserVerificationRequest: type: object description: Trusted partner verification submission payload required: - verificationEvidence properties: verificationEvidence: $ref: '#/components/schemas/DocumentsVerificationEvidence' DocumentsDirectUserVerificationResponse: type: object required: - success - data properties: success: type: boolean description: Whether the request completed successfully data: $ref: '#/components/schemas/DocumentsDirectUserVerificationData' DocumentsPublicErrorResponse: type: object required: - errorCode - errorMessage properties: errorCode: type: string errorMessage: type: string DocumentsVerificationEvidence: type: object description: Partner verification evidence details required: - partnerReferenceId - verificationMethod - verifiedAt properties: partnerReferenceId: type: string description: Partner reference identifier for the verification verificationMethod: type: string description: Method used to verify the user (e.g. sms, document_verification) verifiedAt: type: string format: date-time description: Timestamp when verification occurred (ISO 8601) externalProviderId: type: string description: Required when verificationMethod is document_verification externalReferenceId: type: string description: External reference identifier additionalDetails: type: string description: Optional additional verification details DocumentsDirectUserVerificationData: type: object properties: verified: type: boolean description: Whether the user is verified after this operation alreadyVerified: type: boolean description: >- True when the user was already at verification level 3 (idempotent response) previousVerificationLevel: type: integer format: int32 description: User verification level before this operation verificationLevel: type: integer format: int32 description: User verification level after this operation verifiedAt: type: string format: date-time nullable: true description: >- Recorded verification timestamp (from trusted-partner POI when already verified) partnerVerified: type: boolean description: Whether verification was completed via trusted partner flow partnerReferenceId: type: string description: Partner reference identifier from the request securitySchemes: apiKeyAuth: type: apiKey in: header name: x-api-key description: >- API key of the application. Only valid together with the x-user-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. The pair is granted the same permissions the operation's OAuth scopes describe. Demo credential for trying the API from these docs: `lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663` x-default: lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663 userKeyAuth: type: apiKey in: header name: x-user-key description: >- User-specific authentication key. Only valid together with the x-api-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. Demo credential for trying the API from these docs: `eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_` x-default: >- eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_ oauth2: type: oauth2 description: >- eToro OAuth2 — send the access token as `Authorization: Bearer `. Each operation lists the scopes that grant access as separate `security` requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. Mutually exclusive with the x-api-key/x-user-key credential pair: never send both. flows: authorizationCode: authorizationUrl: '' tokenUrl: '' scopes: etoro-public:demo:read: Grants access to the 'etoro-public:demo:read' scope. etoro-public:kyc:answers:read: Grants access to the 'etoro-public:kyc:answers:read' scope. etoro-public:kyc:answers:write: Grants access to the 'etoro-public:kyc:answers:write' scope. etoro-public:kyc:questions:read: Grants access to the 'etoro-public:kyc:questions:read' scope. etoro-public:kyc:read: Grants access to the 'etoro-public:kyc:read' scope. etoro-public:kyc:regulations:read: Grants access to the 'etoro-public:kyc:regulations:read' scope. etoro-public:kyc:write: Grants access to the 'etoro-public:kyc:write' scope. etoro-public:money.accounts:read: Grants access to the 'etoro-public:money.accounts:read' scope. etoro-public:money.accounts:write: Grants access to the 'etoro-public:money.accounts:write' scope. etoro-public:money.deposit.crypto:read: >- Grants access to the 'etoro-public:money.deposit.crypto:read' scope. etoro-public:money.deposit.crypto:write: >- Grants access to the 'etoro-public:money.deposit.crypto:write' scope. etoro-public:money.ftd:read: Grants access to the 'etoro-public:money.ftd:read' scope. etoro-public:money.ftd:write: Grants access to the 'etoro-public:money.ftd:write' scope. etoro-public:money.withdraw.crypto:read: >- Grants access to the 'etoro-public:money.withdraw.crypto:read' scope. etoro-public:money.withdraw.crypto:write: >- Grants access to the 'etoro-public:money.withdraw.crypto:write' scope. etoro-public:partner-default: Grants access to the 'etoro-public:partner-default' scope. etoro-public:partner:registration:read: >- Grants access to the 'etoro-public:partner:registration:read' scope. etoro-public:partner:registration:write: >- Grants access to the 'etoro-public:partner:registration:write' scope. etoro-public:real:read: Grants access to the 'etoro-public:real:read' scope. etoro-public:sub-accounts:delete: Grants access to the 'etoro-public:sub-accounts:delete' scope. etoro-public:verification.address:read: >- Grants access to the 'etoro-public:verification.address:read' scope. etoro-public:verification.address:write: >- Grants access to the 'etoro-public:verification.address:write' scope. etoro-public:verification.email:write: >- Grants access to the 'etoro-public:verification.email:write' scope. etoro-public:verification.personaldetails:read: >- Grants access to the 'etoro-public:verification.personaldetails:read' scope. etoro-public:verification.personaldetails:write: >- Grants access to the 'etoro-public:verification.personaldetails:write' scope. etoro-public:verification.phone:write: >- Grants access to the 'etoro-public:verification.phone:write' scope. etoro-public:verification.trusted.email:write: >- Grants access to the 'etoro-public:verification.trusted.email:write' scope. etoro-public:verification.trusted.phone:write: >- Grants access to the 'etoro-public:verification.trusted.phone:write' scope. etoro-public:verification:trusted:user:write: >- Grants access to the 'etoro-public:verification:trusted:user:write' scope. ````