verza

South African verification and KYB primitives for AI agents: 10 checks covering identity number validation with safe decode, VAT number validation, phone and email validation, domain age, IP screening, business pre-screens, a published risk score, a free CIPC number format check, National Credit Act loan-agreement lawfulness verdicts and bulk validation, paid per call via the x402 protocol (USDC on Base). No accounts, no API keys.

Skills

• VAT number validation
  Structural validation of a South African VAT registration number (VAT vendor number): 10 digits, leading 4, check digit. Use it to screen a supplier or customer VAT number before invoicing or claiming input VAT. Free. Confirms format only, not active SARS registration.
• SA ID number validation
  Structural validation of a South African identity number with safe decode: Luhn check digit, birth date, gender and citizenship segments (citizen or permanent resident). The structural step in KYC, KYB and customer onboarding or due diligence workflows: derive date of birth, age, gender and citizenship without storing the identity. Run it before a paid registry lookup rather than instead of one: a Home Affairs check is priced in rands per query, so screening structurally first means you never spend one on a number that could not have been issued. Stateless, never stored or logged (POPIA-conscious by construction). Confirms structure only, not registration with Home Affairs. Also callable as /v1/id-validate/{id}.
• NCA loan agreement verification (Reg 42 Verify)
  Independent lawfulness check of a South African credit agreement's interest rate against the National Credit Act (NCA) Regulation 42 maximum rate caps, the statutory interest rate cap that replaced the old usury limits: the maximum rate is fixed at the repo rate on the date the agreement was concluded. Covers every Reg 42 credit type including mortgage agreements, credit facilities, unsecured credit, short-term credit and developmental credit. Verdict, exact cap, excess and full workings, from daily-audited SARB and gazette data, for credit providers, compliance teams and the interest-rate limb of a reckless-lending or affordability review. Covers every agreement under the current Regulation 42 table (concluded 2016-05-06 or later). Also callable as /v1/loan-check/{credit_type}/{annual_rate_percent}/{date_concluded}.
• Bulk identifier validation
  Validate up to 50 South African identifiers in one settled call: ID numbers, VAT numbers, or a mix. Batch screening of a customer or supplier list for structurally invalid South African identifiers, for onboarding, KYC and KYB compliance clean-ups. Same checks and same honest scope as the single endpoints, with a summary of how many passed. Cheaper than five individual ID checks and a single round trip instead of fifty.
• SA contact and identity validation
  Validate a South African phone number, an email address and an optional ID number in one call. Phone returns E.164, line type and the original network allocation, which is not the current network because the number may have been ported. Email checks syntax, MX, disposable and role flags, and does not confirm the mailbox exists. A phone-only request is one check and one charge.
• CIPC enterprise number check
  Decode a South African CIPC enterprise number (YYYY/NNNNNN/TT): registration year, sequence and entity type. Free. It confirms the number is well formed. It does not confirm the enterprise exists, is in business, or its name. CIPC offers no free machine-readable registry lookup. Also callable as /v1/company-validate/{reg}.
• Domain age and registry status
  Domain age and registry status from RDAP via the IANA bootstrap. A South African .za name is refused. Also reports whether an address record and an MX record exist. Dates and status only. It does not confirm who owns or runs the domain. Also callable as /v1/domain-check/{domain}.
• IP address screening
  Screen an IP address against the Tor exit list and published AWS, Google Cloud and Cloudflare ranges, and name the country and network from public registry data. It does not locate a person. VPN and proxy detection beyond Tor exits and known cloud ranges is not offered.
• Business pre-screen
  Supplier pre-screen in one call: CIPC number format, VAT number format, domain age and email DNS. Structural and public DNS checks only. It does not confirm the company exists at CIPC, is VAT-registered at SARS, or holds a B-BBEE level.
• Risk score
  A points sum of named rules over a South African phone number, an email address, an ID number and an IP address. The rules and the points are published. The score is an input to a person, not a decision, and service must not be refused on this score alone.

How to call

https://verza.dev

Listed in

Directories this entry was found in.