The full CKYCRR 2.0 API
Search by OVD, PAN, CKYC number or demographic details. Download with consent, create and update records, and fetch update notifications.
Aadhaar (UIDAI) 6
KYC & Onboarding 3
Digital Signatures 2
Data Privacy (DPDP) 2
MOSIP (National ID) 1
Products
Central KYC Registry integration
Search, download, create and update KYC records on CERSAI’s registry through one API. We handle the tokens, signing, encryption and mutual TLS.
CKYC Platform
One secure API for your systems, and a browser console for your team.
Search by OVD, PAN, CKYC number or demographic details. Download with consent, create and update records, and fetch update notifications.
The platform obtains the token, signs and encrypts each request, calls CKYCRR over mutual TLS, then decrypts and verifies the reply.
Each client gets its own API key, API permissions, IP allowlist and validity dates. Keys are stored only as hashes.
Each call is logged with its status, CKYCRR error code, response time and CERSAI request ID, ready for monthly billing. Customer data is never logged or stored.
Switch on the simulator to run complete flows on sample registry responses. Nothing leaves the server, and simulated calls are never billed.
Certificates, credentials and registry options live in settings and take effect within minutes, so testbed and live differences need no rebuild.
Search + Download
The platform takes each download through CKYCRR’s consent journey, one step at a time.
How a download works
Find the record by OVD, PAN, CKYC number or demographic details.
Start the download with the CKYC reference from the search.
Capture consent by OTP, an uploaded consent form or face authentication.
Validate the OTP sent to the customer’s registered mobile and email, or resend it.
Receive the complete KYC record as plain JSON.
When the registry already holds the customer’s consent, the platform skips straight from initiate to fetch.
Create + Update
Client API
Your systems never see an envelope, a certificate or a cipher. Just the registry’s fields, in and out.
apiKey: •••••••••••••••• { "clientId": "NBFC0142", "txnId": "SRCH-20261016-0001", "ckycType": "INDIVIDUAL", "searchOption": "OVD", "data": { "ovdDetails": [{ "ovdType": "C", "ovdNo": "ABCDE1234A", "fullName": "Ramesh Kumar", "dob": "01-01-2000", "gender": "M" }] } }
{
"txnId": "SRCH-20261016-0001",
"ecsTxnId": 1001,
"txnType": "SEARCH",
"status": "SUCCESS",
"data": {
"message": "Individual entity records found",
"data": {
"searchKey": "IOV26081953046445726",
"results": [{
"fullName": "Ramesh Kumar",
"ckycRefNo": "INRGPK1234567",
"status": "ACTIVE"
}]
}
}
}
Each call carries your own txnId. Duplicates are rejected, so nothing is processed twice.
Validation errors name the field at fault. Registry failures return CKYCRR’s own code, unchanged.
Quote the ecsTxnId to us, and we can trace the call down to CERSAI’s request ID.
Web console
We’ll walk you through search, consent-led download, create and update, end to end.