Seedance Create H5 Verification Session API

Create a real-person verification session and return a bytedToken plus an H5 liveness link.

Create a real-person verification session and return bytedToken and an H5 link. Ask the user to open h5Link on a phone and finish the liveness check. Pass callbackUrl to use a custom callback. If you omit it, look up the asset group by bytedToken after a successful check to get the real-person group ID.

Real-person verification is required. It cannot be skipped or bypassed with an allowlist. If the same real person calls this endpoint multiple times, a new real-person asset group is created each time.

Base URL

https://api.autorouter.top — Production

{
  "callbackUrl": "https://example.com/auth/callback"
}

Properties:

Name	Type	Required	Description
`callbackUrl`	string	No	Your custom callback URL. When set, follow the custom callback flow below

callbackUrlstring(Optional)

Your custom callback URL.

Custom callback flow:

Call Create H5 Verification Session with your callbackUrl, and receive bytedToken, h5Link, and expiresIn.
Ask the real-person asset group creator to open h5Link and finish the liveness check before expiresIn expires. Volcano Engine calls your callbackUrl and appends ?bytedToken=&resultCode=10000&algorithmBaseRespCode=0&reqMeasureInfoValue=1&verify_type=real_time. resultCode=10000 means success; any other value means failure. Do not put query parameters on callbackUrl, or they will conflict with the parameters Volcano appends.
After you confirm that resultCode indicates success, call Confirm Real-Person Verification and Get Asset Group with bytedToken before expiresIn expires to get groupId.
[Optional / later] Call Get Asset Group by bytedToken with bytedToken to get groupId.

Responses

200: Success

Content-Type: application/json

Request examples

curl -X POST "https://api.autorouter.top/seedance/v1/real-person-auth/sessions" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer sk-xxxxxx" \
  -d '{
  "callbackUrl": "https://example.com/auth/callback"
}'

Response examples

{
  "requestId": "20ad53e3-8e3c-4ddd-90b3-fc452e54f673",
  "state": "OK",
  "errorCode": null,
  "errorMessage": null,
  "body": {
    "bytedToken": "202608030954115CF1D0D1C821E6CA8510",
    "h5Link": "https://ark.volcengine.com/region:cn-beijing/mobile/livenees-face-ma...",
    "expiresIn": 120
  }
}

Response fields:

Name	Type	Description
`requestId`	string	Request ID
`state`	string	Call status. `OK` means success, `ERROR` means failure
`errorCode`	string	Error code. Empty string or `null` on success
`errorMessage`	string	Error message. Empty string or `null` on success
`body`	object	Real-person verification session
`body.bytedToken`	string	Verification token, used to query the result and the matching asset group
`body.h5Link`	string	H5 liveness-check link. Ask the user to open it on a phone and finish verification
`body.expiresIn`	integer	Token lifetime, in seconds

statestring

Call status. OK means success, ERROR means failure

OK: Success
ERROR: Failure. Check errorCode and errorMessage

bodyobject

Real-person verification session

bytedTokenstring

Verification token, used to query the result and the matching asset group

h5Linkstring

H5 liveness-check link. Ask the user to open it on a phone and finish verification

expiresIninteger

Token lifetime, in seconds

Error handling

When the HTTP status is 200, still check state in the response body.

`state`	Description
`OK`	The call succeeded. Business data is in `body`
`ERROR`	The call failed. `errorCode` is the error code and `errorMessage` is the error message

On success, errorCode and errorMessage may be an empty string or null.

Create H5 Verification Session

Base URL

Authentication

Endpoints

POST `/seedance/v1/real-person-auth/sessions`

Request Body