API reference

Verify

Check whether a PDF is an unchanged document signed with eSora Sign. No API key needed.

Endpoints · 2

POST Verify by fingerprint
POST Verify a file

The object

Field	Type	Description
`match`	boolean	true when the fingerprint matches a sealed record.
`record`	object	When it matches: envelopeTitle, completedAt, finalSha256, originalSha256, workspaceName, manifestSignatureValid, and signers with name, emailMasked, signedAt and verification.

POST/verify

Verify by fingerprint

Send the PDF’s SHA-256 as JSON. The file never leaves your computer. Limited to 30 requests a minute.

Parameter	Type		Description
`sha256`	string	required	64 lowercase hex characters.

Request

bash

curl -X POST "https://api.esorasign.com/v1/verify" \
  -H "Content-Type: application/json" \
  -d "{ \"sha256\": \"$(shasum -a 256 signed.pdf | cut -d' ' -f1)\" }"

Response

json

{
  "match": true,
  "record": {
    "envelopeTitle": "Service agreement - Northwind",
    "completedAt": "2026-11-03T09:41:27.000Z",
    "finalSha256": "9f2c4e1b7a03d5f86c2e9b14a7d0f3c58e61b2a49d7c0e3f15a8b6d2c4e9f701",
    "originalSha256": "4b1e…",
    "revisionSha256": "c07a…",
    "workspaceName": "Northwind Traders",
    "keyId": "seal-2026-07",
    "manifestSignatureValid": true,
    "signers": [ { "name": "Maya Chen", "emailMasked": "m•••@example.com", "signedAt": "2026-11-03T09:41:27.000Z", "verification": "email_code" } ]
  }
}

POST/verify

Verify a file

Or upload the PDF as multipart/form-data in a part named file (up to 50 MB).

Parameter	Type		Description
`file`	file	required	The PDF.

Request

bash

curl -X POST "https://api.esorasign.com/v1/verify" -F "file=@signed.pdf"

Response

json

{ "match": false }