npm install @keverd/node

import { Keverd } from '@keverd/node';

const keverd = new Keverd({
  secretKey: process.env.KEVERD_SECRET_KEY!, // kv_sk_live_… or kv_sk_test_…
  // baseUrl: 'https://api.keverd.com',
  // timeoutMs: 30000,
});

const result = await keverd.verify(eventId);

if (result.action === 'block') {
  // reject
} else if (result.action === 'soft_challenge' || result.action === 'hard_challenge') {
  // step-up auth
} else {
  // allow
}

import express from 'express';
import { Keverd } from '@keverd/node';

const app = express();
const keverd = new Keverd({ secretKey: process.env.KEVERD_SECRET_KEY! });

app.post('/login', express.json(), async (req, res) => {
  const { eventId } = req.body;
  const risk = await keverd.verify(eventId);

  if (risk.action === 'block') {
    return res.status(403).json({ error: 'Blocked', reasons: risk.reasons });
  }

  res.json({ ok: true, visitorId: risk.visitor_id });
});

app.post(
  '/webhooks/keverd',
  express.raw({ type: 'application/json' }),
  (req, res) => {
    const event = keverd.webhooks.constructEvent(
      req.body, // raw Buffer — do not JSON.parse first
      req.headers['x-keverd-signature'] as string,
      process.env.KEVERD_WEBHOOK_SECRET!, // whsec_…
    );

    if (event.type === 'verification.completed') {
      const verification = event.data.object; // same shape as verify()
    }

    res.sendStatus(200);
  },
);