UAP overview

The Universal Approval Protocol (UAP) is a separate product from the Vendor API. UAP SDKs call:

text
https://auth-api.vineeid.com

Your server initializes a flow with an x-api-key. Vine returns a short code, a flow identifier, and a flow secret. Send only the code and flow identifier to the browser; retain the secret only on your server.

Choose an SDK

Use a server SDK for Node.js, Go, Zig, Rust, PHP, or Laravel. Use the React/browser SDK only for QR generation and polling your own server endpoint. WordPress provides a ready-made login integration.

Approval lifecycle

  1. Your server calls initFlow with a VID, request type, and requested scopes.
  2. Vine sends the approval request to the user's device and returns a QR code value.
  3. Your browser displays the QR value and polls your own backend route.
  4. Your backend checks flow status with the flow secret.
  5. The flow resolves as approved, rejected, or expired.

See flow security and lifecycle before implementing a client UI.