Build on devs who can't reset.

{
  "wallet": "2sqA7hhhJHckSFMMP8hJNHc86L4JNYNbh6Ts3ymMCWvP",
  "verified": true,
  "verifiedAt": "2026-10-02T14:21:07.000Z",
  "record": {
    "launched": 2,
    "graduated": 1,
    "onCurve": 1,
    "dead": 0
  },
  "coins": [
    "…coin objects, same shape as /coins/{mint}"
  ],
  "links": {
    "page": "https://www.kycpad.fun/dev/2sqA7hhhJHckSFMMP8hJNHc86L4JNYNbh6Ts3ymMCWvP",
    "badge": "https://www.kycpad.fun/api/badge/dev/2sqA7hhhJHckSFMMP8hJNHc86L4JNYNbh6Ts3ymMCWvP"
  }
}

import bs58 from 'bs58'

// 1. Build the exact message the server expects. It is valid for 10 minutes.
const wallet = provider.publicKey.toBase58()
const issued = new Date().toISOString()
const message = [
  'kycpad identity request',
  '',
  'I am starting ID verification for this wallet. Only this wallet will be allowed to launch coins under my verified identity.',
  '',
  `wallet: ${wallet}`,
  `issued: ${issued}`,
].join('\n')

// 2. Sign it. This is an off-chain message: no transaction, no fee.
const { signature } = await provider.signMessage(new TextEncoder().encode(message))

// 3. Ask kycpad for a Stripe Identity session tied to this wallet.
const res = await fetch('/api/kyc/start', {
  method: 'POST',
  headers: { 'content-type': 'application/json' },
  body: JSON.stringify({ message, signature: bs58.encode(signature) }),
})
const { url, state } = await res.json()

// 4. Open Stripe's hosted flow (ID photo + live selfie), then poll until it settles.
if (url) window.open(url, '_blank')
let status = state.status
while (status === 'requires_input' || status === 'processing') {
  await new Promise((r) => setTimeout(r, 3000))
  status = (await fetch(`/api/kyc/status?wallet=${wallet}`).then((r) => r.json())).status
}
// status is now 'verified', 'duplicate' or 'canceled'

const key = `${first_name}|${last_name}|${address.line1}|${address.postal_code}|${address.country}`
  .normalize('NFKD').toLowerCase().replace(/\s+/g, ' ').trim()

const personHash = createHmac('sha256', `kycpad:person:${SECRET}`).update(key).digest('hex')
// stored: personHash, country, verified_at — nothing else

import { VersionedTransaction } from '@solana/web3.js'

const fromB64 = (s: string) => VersionedTransaction.deserialize(Uint8Array.from(atob(s), (c) => c.charCodeAt(0)))
const toB64 = (tx: VersionedTransaction) => btoa(String.fromCharCode(...tx.serialize()))

// 1. Prepare: kycpad checks your verification, pins metadata to IPFS and builds the transactions.
const form = new FormData()
form.set('wallet', wallet)
form.set('name', 'Accountable Dog')
form.set('symbol', 'ACCT')            // 1–10 letters/digits, "$" is stripped
form.set('description', 'A dog with a passport.')
form.set('image', file)               // PNG, JPG, GIF or WebP, max 3.5 MB
form.set('buySol', '0.5')             // optional initial buy, 0–10 SOL
form.set('twitter', 'https://x.com/acctdog')

const prep = await fetch('/api/launch/prepare', { method: 'POST', body: form })
if (!prep.ok) throw new Error((await prep.json()).error) // 403 kyc_required, 402 insufficient_sol, 429 …
const { mint, createTx, buyTx } = await prep.json()

// 2. One approval in the wallet signs both (the mint key already co-signed the create).
const txs = [fromB64(createTx), ...(buyTx ? [fromB64(buyTx)] : [])]
const [signedCreate, signedBuy] = await provider.signAllTransactions(txs)

// 3. Confirm: the server re-verifies every byte, then relays create → buy.
let res
do {
  res = await fetch('/api/launch/confirm', {
    method: 'POST',
    headers: { 'content-type': 'application/json' },
    body: JSON.stringify({ mint, createTx: toB64(signedCreate), buyTx: signedBuy ? toB64(signedBuy) : null }),
  })
} while (res.status === 202) // still landing: re-send the same signed bytes

const { status, signature, buyError } = await res.json() // status: 'live'

{
  "mint": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU",
  "name": "Accountable Dog",
  "symbol": "ACCT",
  "description": "A dog with a passport.",
  "image": "https://ipfs.io/ipfs/bafkrei…",
  "dev": "2sqA7hhhJHckSFMMP8hJNHc86L4JNYNbh6Ts3ymMCWvP",
  "permitNo": 12,
  "launchedAt": "2026-10-02T15:03:44.000Z",
  "status": "curve",
  "curve": {
    "progress": 0.4127,
    "complete": false,
    "marketCapSol": 61.204,
    "solToGraduate": 48.31
  },
  "links": {
    "page": "https://www.kycpad.fun/coin/7xKX…gAsU",
    "pump": "https://pump.fun/coin/7xKX…gAsU",
    "badge": "https://www.kycpad.fun/api/badge/coin/7xKX…gAsU",
    "website": null,
    "twitter": "https://x.com/acctdog",
    "telegram": null
  }
}

import { Connection, PublicKey } from '@solana/web3.js'

const PUMP = new PublicKey('6EF8rrecthR5Dkzon8Nwu78hRvfCKubJ14M5uBEwF6P')
const connection = new Connection('https://api.mainnet-beta.solana.com')

// Don't trust us: read the creator straight from pump.fun's bonding curve account.
export async function creatorOf(mint: string) {
  const [curve] = PublicKey.findProgramAddressSync(
    [Buffer.from('bonding-curve'), new PublicKey(mint).toBuffer()],
    PUMP,
  )
  const info = await connection.getAccountInfo(curve)
  if (!info || info.data.length < 81) return null
  return new PublicKey(info.data.subarray(49, 81)).toBase58() // creator pubkey, bytes 49..81
}

const mint = '<coin mint>'
const coin = await fetch(`https://www.kycpad.fun/api/v1/coins/${mint}`).then((r) => r.json())
console.log((await creatorOf(mint)) === coin.dev ? 'creator matches the verified dev' : 'MISMATCH')