PreHireBadge API

Orders create an invite. The employer never sends a Social Security number or a date of birth. A test key (phb_test_) with header X-PHB-Test-Outcome finishes the invite from a fixture and does not call ScreenForge or Stripe.

curl -X POST https://www.prehirebadge.com/api/v1/checks \
  -H "Authorization: Bearer phb_test_..." \
  -H "Content-Type: application/json" \
  -H "X-PHB-Test-Outcome: clear" \
  -d '{  "firstName": "Ada",  "lastName": "Lovelace",  "email": "ada@example.com",  "locationId": "LOCATION_ID",  "positionTitle": "Analyst",  "payBand": "25_75k",  "conditionalOfferMade": true}'

Verify a webhook

const expected = hmacSha256(secret, timestamp + "." + rawBody);
reject the request when the timestamp is older than five minutes.

Events: invite.sent, invite.completed, invite.expired, check.completed, check.records_found, check.unverifiable, check.error, adverse_action.pre_notice_sent, adverse_action.response_received, adverse_action.dispute_opened, adverse_action.dispute_resolved, adverse_action.final_notice_sent.