# sumsub-integrate-websdk

Walks a web project through the full Sumsub KYC integration, from picking a level to the webhook that finally grants the user access.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1200 installs · ★ 7
- Author: sumsub
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/sumsub/agent-skills/tree/HEAD/skills/sumsub-integrate-websdk/SKILL.md
- Updated: 2026-10-02
- HTML: https://affpapa.org/en/nevibecode/skills/sumsub-integrate-websdk

## What it does

The skill drives the whole loop. Stage one is a `levelName` that already lives in your workspace; if you don't have one, the agent talks through what the check should contain and hands the job to the sibling skill `sumsub-create-level`. It won't invent a questionnaire on its own.

Stage two is your backend. A route signs the request with HMAC and asks Sumsub for a short-lived access token scoped to one `(userId, levelName)` pair. The `userId` you pass becomes `externalUserId`, so keep it stable and opaque — a UUID or a database row id, never an email. Pick it badly and you get duplicate applicants, tickets about verifications stuck in submitted, and no way to resume a check the user abandoned.

On the client the skill loads `sns-websdk-builder.js` from the CDN, then initialises `snsWebSdk` and launches the widget. Here is the part teams usually get wrong: browser callbacks such as `onApplicantStatusChanged` are for the interface only. Gate access on the `applicantReviewed` webhook plus a server-side applicant read. You also need a sandbox App Token and secret pair, because a production token spins up sessions against real applicants.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add sumsub/agent-skills --skill sumsub-integrate-websdk -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/sumsub-integrate-websdk/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/sumsub-integrate-websdk/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add sumsub/agent-skills --skill sumsub-integrate-websdk -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/sumsub-integrate-websdk/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add sumsub/agent-skills --skill sumsub-integrate-websdk -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/sumsub-integrate-websdk/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install sumsub/agent-skills sumsub-integrate-websdk
```

2. **Manually: put the files in place**
- File: `.github/skills/sumsub-integrate-websdk/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add sumsub/agent-skills --skill sumsub-integrate-websdk -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/sumsub/agent-skills --path skills/sumsub-integrate-websdk
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/sumsub-integrate-websdk/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add sumsub/agent-skills --skill sumsub-integrate-websdk -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/sumsub/agent-skills/tree/HEAD/skills/sumsub-integrate-websdk/SKILL.md

## When to use it
- embed the Sumsub KYC widget on a page and start a check
- sign a server request and hand an access token to the browser
- refresh the token while the user is still verifying
- separate browser UX callbacks from the authoritative verdict
- test the whole flow in sandbox before going live

## Example prompts
- Add the Sumsub WebSDK to the verification page using level `basic-kyc-level`
- Create a `POST /api/sumsub/access-token` route that returns a token for the logged-in user
- Handle the `applicantReviewed` webhook and grant access from the verdict

## Similar
- [frontend-design](https://affpapa.org/en/nevibecode/skills/frontend-design.md) — skill · 1025790 installs
- [design-taste-frontend](https://affpapa.org/en/nevibecode/skills/design-taste-frontend.md) — skill · 678700 installs
- [prototype](https://affpapa.org/en/nevibecode/skills/prototype.md) — skill · 986201 installs
- [hyperframes](https://affpapa.org/en/nevibecode/skills/heygen-com-hyperframes.md) — skill · 1200000 installs
- [hyperframes-cli](https://affpapa.org/en/nevibecode/skills/heygen-com-hyperframes-cli.md) — skill · 1300000 installs
- [webapp-testing](https://affpapa.org/en/nevibecode/skills/webapp-testing.md) — skill · 186758 installs

From the same set: [sumsub/agent-skills](https://affpapa.org/en/nevibecode/by/sumsub/agent-skills.md) — 11 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md