Skip to main content

A Practical Guide to Testing FrankieOne v2 APIs

Never use real customer data in testing environments. FrankieOne handles sensitive personally identifiable information (PII) for KYC/AML verification. Always use testbed data in UAT/Sandbox environments. Real customer data must only be processed in Production with appropriate controls.

Document Overview

This guide explains how to use Postman or Bruno to explore and test FrankieOne’s v2 APIs, helping you understand how our platform works before integrating it into your application. API Version: This guide focuses on v2 APIs (recommended for all new integrations)

What You’ll Learn

  • What Postman and Bruno are and why they’re useful
  • How to choose the right tool for your team
  • How to access FrankieOne’s v2 API collection
  • How to set up your environment
  • How to create entities using v2 payloads
  • How to run verification checks
  • How to view results in the FrankieOne Portal
  • Common testing scenarios with v2
  • Troubleshooting tips

Who Should Read This

  • Developers evaluating FrankieOne
  • Technical teams planning integration
  • Anyone wanting to understand FrankieOne’s v2 APIs
  • Teams testing verification workflows

Table of Contents

  1. Choosing Your API Client
  2. Getting Started
  3. Setting Up Your Environment
  4. Understanding the v2 API Collection
  5. Using Testbed Data
  6. Running Your First v2 API Call
  7. Viewing Results in the Portal
  8. Common Testing Scenarios
  9. Understanding API Responses
  10. Best Practices
  11. Troubleshooting
  12. Next Steps
  13. FAQs

Choosing Your API Client

What Are API Clients?

API clients are tools that allow you to send API requests without writing code, see responses in real-time, and test different scenarios easily. Think of them as: A visual interface for interacting with APIs—like a web browser for APIs instead of websites.

Postman vs Bruno

Which Should You Choose?

Choose Postman if you:

  • Want cloud sync across devices
  • Prefer a polished, feature-rich interface
  • Need built-in team collaboration features
  • Are already familiar with Postman

Choose Bruno if you:

  • Want to version control your API collections with Git
  • Prefer data stored locally (privacy-focused)
  • Don’t want to create an account
  • Work offline frequently
  • Want a lightweight, fast tool
Both tools work equally well with FrankieOne’s v2 APIs. Choose based on your team’s preferences.

Getting Started

Step 1: Install Your Chosen Tool

Download:Alternative: Use Postman Web (browser-based) at https://web.postman.co

Step 2: Get FrankieOne’s v2 API Collection

Where to get the collection:
  • Download directly: FrankieOne Developer Resources — look for the v2 API collection file (.json)
  • Contact your FrankieOne representative if the collection is not available on the resources page
The collection includes pre-configured v2 API requests, example payloads for all v2 endpoints, and requests organized by functionality.

Step 3: Import the Collection

  1. Click “Import” (top left)
  2. Choose file or drag and drop
  3. Select the FrankieOne v2 collection file
  4. Click “Import”
Result: Collection appears in left sidebar, ready to use.

Step 4: Get Your API Credentials

You’ll need: How to Get Them:
  1. Contact your FrankieOne representative
  2. Request UAT/Sandbox access
  3. Ask about Customer Child ID (if you have sub-accounts)
  4. Receive credentials via secure channel
  5. Keep credentials secure
Environments:

Quick Authentication Reference

Here’s exactly how your authentication headers should look in every v2 API request:
Do not commit API keys to source control. Store credentials in environment variables and add environment files to .gitignore.

Understanding Customer Child ID

What is Customer Child ID? X-Frankie-CustomerChildID is an optional header used for sub-account isolation within your main FrankieOne account. When to Use It: How It Works: Key Points:
  • CustomerChildID is configured by FrankieOne - you cannot create child IDs via API
  • All entities created with a specific CustomerChildID are isolated to that sub-account
  • Reporting and data access are separated by CustomerChildID
  • If you don’t have sub-accounts, leave this header blank or omit it
Important: If you have CustomerChildID configured, you must use the correct value in the header. Using the wrong CustomerChildID or omitting it when required may result in entities being created in the wrong sub-account or authentication errors.
To Get Your CustomerChildID:
  1. Contact your FrankieOne representative
  2. Ask if you have sub-accounts configured
  3. Receive CustomerChildID values if applicable
  4. Add to your environment variables

Setting Up Your Environment

What Are Environments?

Environments store variables like your API base URL, Customer ID, and API Key. They let you:
  • Switch between UAT and Production easily
  • Keep credentials secure
  • Reuse variables across all requests
  • Share collections without exposing keys

Required Variables for v2 API

Creating Your Environment

Step 1: Create New Environment
  1. Click “Environments” (left sidebar)
  2. Click ”+” to create new
  3. Name it: FrankieOne v2 UAT
Step 2: Add VariablesStep 3: Activate Environment
  1. Click “Save”
  2. Select environment from dropdown (top right)

Using Variables in Requests

Both Postman and Bruno use the same syntax for variables:
Example v2 Request URL:
Example Headers:
X-Frankie-CustomerChildID is optional. Include it only if you have sub-accounts or child entities configured by FrankieOne.
The tool automatically replaces {{variableName}} with the actual value from your environment.

Understanding the v2 API Collection

v2 API Structure

FrankieOne’s v2 API collection is organized by entity type and functionality:

Key v2 Endpoints

Sample Request and Response

Here’s a complete example of creating an individual and what you’ll get back, so you can quickly validate your setup is working: Request:
Response format depends on the endpoint you use:
  • Create Individual, then Execute Workflow (two-step): The create response returns the individual object. The workflow execute response returns the workflowResult. See Create Individual and Execute Workflow for full response schemas.
  • Create and Execute Workflow (single step): The response includes individual, serviceProfile, and workflowResult in a single payload. See Create and Execute Workflow for the full response schema.
Key fields to save:
  • individual.entityId — Unique identifier for this individual. You’ll need it for subsequent requests (document uploads, re-verification, monitoring).
  • workflowResult.result — Overall workflow outcome (e.g., PASS, FAIL, REVIEW)
  • workflowResult.status — Execution status (e.g., COMPLETED)
  • workflowResult.issues[] — Any issues flagged (e.g., BAD_DATA_ID, RISK_THRESHOLD_HIGH)
  • workflowResult.workflowStepResults[] — Detailed results per workflow step (KYC, AML, etc.)

Using Testbed Data

What is Testbed Data?

Testbed data is pre-configured test data that produces predictable results in the FrankieOne UAT environment. Purpose:
  • Test different scenarios
  • No real customer data needed
  • Consistent, repeatable results
  • Safe for testing
Always use testbed data for testing. Do not use fictional names like “John Smith” or “Jane Doe” — use the actual testbed names listed below for consistent, reliable results. Never use real customer PII in UAT/Sandbox environments.
Full testbed data reference: FrankieOne Testbed Data Guide

Test Scenario Types

Triggering a FAIL (KYC Not Found) result: You don’t need a specific testbed record to test failure scenarios. Simply modify the name, date of birth, or address so it doesn’t match the testbed data. For example, misspell the family name or change the street number. The verification will fail because the data can’t be matched.

v2 Testbed Quick Reference

Here are the key test scenarios. For the complete set of v2 testbed payloads (including Medicare, SSN, Aadhaar, Passport, and more), see the UAT Test Data page.
Expected Result: CLEAR (PASS)
Expected Result: PEP match
Expected Result: SANCTION match
Workflows without ID documents: The SANCTION (TESTNINETEEN) and combined PEP + SANCTION (TESTTWENTY) examples above do not include identity documents. When testing without ID documents, use a workflow that does not require ID verification, such as AUS-Basic3V-TwoPlus. If you use a workflow that expects an ID document (e.g., AUS-Basic3V-TwoPlusID or AUS-Basic1V-IDOnly), you will receive a BAD_DATA_ID error.
Use the actual testbed names (TESTONE, TESTTWO, etc.) — do not use fictional names like “John Smith”. See the full v2 testbed examples for all scenarios including international documents.
Important: Document Type Values in v2Use DRIVERS_LICENSE (American spelling with underscore), not DRIVERS_LICENCE.Valid Document Types:
  • DRIVERS_LICENSE ✅ (correct - American spelling)
  • PASSPORT
  • NATIONAL_ID (used for USA SSN, Aadhaar, China National ID, etc.)
  • NATIONAL_HEALTH_ID (used for Australian Medicare)
  • TAX_ID
  • VISA
  • IMMIGRATION
  • BIRTH_CERT
  • CITIZENSHIP
  • MARRIAGE_CERT
  • UTILITY_BILL
  • BANK_STATEMENT
  • CONCESSION
  • PENSION
  • MILITARY_ID
  • OTHER
Country-Specific Document Requirements:Australian Driver’s License Requirements: For Australian driver’s licenses, you must include both:
  • primaryIdentifier - License number (e.g., “283229690”)
  • secondaryIdentifier - Document number / Card number (e.g., “P5403241”)
Example:
Australian Medicare Card Requirements: For Australian Medicare cards, you must include:
  • primaryIdentifier — Medicare card number (10 digits, e.g., “6603984391”)
  • subtype — Card color: G (Green), B (Blue), or Y (Yellow)
  • subdivision — State or territory of issue (e.g., “VIC”)
  • expiryDate — Must include unstructured (YYYY-MM-DD) and type (“GREGORIAN”)
  • supplementaryData.reference — Individual reference number (1-9)
  • supplementaryData.nameOnCardLine1 — Name as printed on the card
Example:
USA Social Security Number: Use NATIONAL_ID document type (NOT TAX_ID):
India Aadhaar: Use NATIONAL_ID document type (12 digits without dashes):
China National ID: Use NATIONAL_ID document type (18 digits in production). Provide the name in Pinyin (uppercase) on the document, and the Chinese characters in supplementaryData.homeCountryFullName:
Common Mistakes:
  • DRIVERS_LICENCE (British spelling)
  • DRIVER_LICENSE (missing S)
  • ❌ Abbreviations like DL
Important v2 Differences from v1:
  • Dates use objects: {year: "YYYY", month: "MM", day: "DD"}
  • Address fields: locality (not suburb or city), subdivision (not state), postalCode (not postcode)
  • Documents nested by category: documents.IDENTITY[]
  • Document ID field: primaryIdentifier (not idNumber)
  • schemaVersion: 2 may be included but is optional (it’s a response field)

Running Your First v2 API Call

Overview: Create Individual Entity (v2)

This walkthrough demonstrates:
  1. Creating an individual entity using v2 API
  2. Understanding the v2 response
  3. Saving the entity ID for subsequent requests

Step 1: Select the Create Individual Request (v2)

  1. Expand “Individuals (v2)” folder in left sidebar
  2. Click “Create Individual”
  3. Request details appear on right

Step 2: Review the v2 Request

URL:
Headers:
Header Details:
  • api_key: Your API authentication key
  • X-Frankie-CustomerID: Your main customer/account ID
  • X-Frankie-CustomerChildID: Optional - used for sub-account isolation when configured by FrankieOne
  • Content-Type: Always application/json for v2 API requests
Body (JSON) - v2 Format:
Example uses FrankieOne testbed data: JUDY TESTTWO is a real test record in UAT that produces CLEAR (PASS) results. Use actual testbed names for reliable testing.
v2 Key Features:
  • schemaVersion: 2 is optional (primarily a response field)
  • Dates are objects, not strings
  • Addresses use locality, subdivision, postalCode
  • Email and phone are arrays with type and preference
  • All wrapped in individual object

Step 3: Send the Request

  • Click the blue “Send” button (top right)
  • Wait for response (usually 1-3 seconds)
  • Response appears in bottom panel

Step 4: Review the Response

The response structure depends on the endpoint you use. Refer to the API documentation for full response examples:
Key fields to look for: For a full guide on interpreting workflow responses, see Interpreting Workflows v2.

Step 5: Save the Entity ID

You’ll need the entityId for subsequent requests (document uploads, re-verification, monitoring).
Manual Method:
  1. Copy entityId from response
  2. Go to your environment (click environment dropdown > Edit)
  3. Update variable: entityId = abc123-def456-ghi789-jkl012
  4. Save environment
Automatic Method (Post-response Script): Add this to the “Tests” tab of your Create Individual request:
Success! You’ve created a v2 individual entity.

Executing a Workflow (v2)

What Are Workflows?

Workflows in FrankieOne v2 are pre-configured verification processes that can include:
  • KYC (Electronic verification)
  • IDV (Document verification)
  • AML (Screening)
  • Risk assessment
Workflows are configured by FrankieOne based on your requirements. You execute them via API but cannot configure them via API.

Step 6: Execute a Workflow

Select the Request:
  1. Expand “Individual Workflows (v2)” folder
  2. Click “Execute Workflow”
URL:
Required Variables: Common Workflow Names: Body:
Or if updating individual data and executing workflow:
Send the Request and review the response:
Workflow execution is asynchronous. Check the Portal or poll the individual’s details to see when results are available.

Viewing Results in the Portal

Why Use the Portal?

Use both together: Send requests in Postman/Bruno, then view detailed results in the Portal.

Accessing the Portal

Login: Use credentials provided by FrankieOne (same account as API credentials).

Finding Your Individual

Method 1: Search by Name
  1. Click “Entities” in navigation
  2. Enter customer name in search
  3. Click on individual to view
Method 2: Search by Entity ID
  1. Copy entityId from your API response
  2. Paste into search bar
  3. Click on individual
Method 3: View Recent
  1. Click “Entities”
  2. Sort by “Most Recent”
  3. Your test individual should be at top

Understanding the Portal View

Real-Time Updates

The Portal updates in real-time:
  1. Send API request via Postman/Bruno
  2. Refresh Portal (or wait for auto-refresh)
  3. See new results immediately

Common Testing Scenarios

Scenario 1: Create Individual with Minimal Data

Objective: Test minimal required fields for v2 individual creation v2 Payload:
Expected Result:
  • Status: 201 Created
  • Returns entityId
  • Individual created successfully
  • Testbed result: CLEAR (PASS)

Scenario 2: Create Individual with Document

Objective: Create individual with identity document for verification v2 Payload:
Expected Result:
  • Individual created with document
  • Ready for workflow execution
  • Document details stored
  • Testbed result: CLEAR (PASS)

Scenario 3: Minor (Under 18)

Objective: Create individual under 18 years old v2 Payload:
Key Points:
  • Must include UNDER18 consent
  • Age calculated from dateOfBirth
  • May require guardian information (check with FrankieOne)

Scenario 4: Individual with Custom Attributes

Objective: Store custom business data with individual v2 Payload:
Use Cases:
  • Store business-specific data
  • Track customer segments
  • Store account types
  • Custom workflow routing

For additional country-specific testing scenarios (Medicare, SSN, Aadhaar, China National ID, international passports), see the UAT Test Data page which includes complete v2 payloads for all supported document types.

Understanding API Responses

HTTP Status Codes

Common v2 Response Fields

Response structure varies depending on whether you use Create Individual (two-step) or Create and Execute Workflow (single step). Refer to the API docs for full response schemas:
Part 1: The Overall Outcome (The Final Verdict) Start by examining the top-level fields of the workflowResult object. These provide the final, authoritative outcome of the entire workflow execution. For a full guide on interpreting workflow responses, see Interpreting Workflows v2. Part 2: Key Fields to Save Error Response:

Common Validation Errors in v2


Best Practices

1. schemaVersion is Optional

Optional in v2:
schemaVersion is marked as readOnly in the OpenAPI specification, meaning it’s primarily a response field. While you can include it in requests, it’s not required and will be returned by the API in responses.

2. Use Correct v2 Field Names

v2 Uses:
  • locality (not suburb or city)
  • subdivision (not state)
  • postalCode (not postcode)
  • primaryIdentifier (not idNumber)

3. Use Date Objects, Not Strings

Correct v2 Format:
Incorrect (v1 format):

4. Structure Documents Correctly

Correct v2 Format:
Incorrect:

5. Use Environment Variables

Why:
  • Easy to switch between UAT and Production
  • Keep credentials secure
  • Reuse across requests
  • Save entityId automatically

6. Use Testbed Data Only

Never use real customer data in testing environments. This is a compliance requirement for handling PII in KYC/AML systems. Always use FrankieOne’s official testbed data which provides predictable, repeatable results.

7. Check Both API Response and Portal

Complete testing workflow:
  1. Send request in Postman/Bruno
  2. Check API response
  3. View in Portal
  4. Verify both match
  5. Understand complete picture

8. Version Control (Bruno)

Since Bruno stores collections as files:
Add your environment files to .gitignore to avoid committing credentials:

9. Test Edge Cases

Don’t just test the happy path:
  • Missing optional fields
  • Invalid data formats
  • Different countries
  • Various document types
  • Minors vs adults
  • Multiple addresses

Troubleshooting

Authentication Error (401)

Problem: Unauthorized or Invalid API key Solutions:
Common Authentication Issues with CustomerChildID:
  • Using CustomerChildID when you don’t have sub-accounts configured
  • Using wrong CustomerChildID value
  • Omitting CustomerChildID when you have sub-accounts
  • Typos in header name (must be exactly X-Frankie-CustomerChildID)

Date Format Error

Problem: Invalid date format or date validation errors Solutions: Correct:

Field Name Error

Problem: Unknown field or field not recognized Solutions:

Document Structure Error

Problem: Invalid document structure or validation errors Solutions: Correct v2 Structure:
Common Mistakes:
  • Using document instead of documents
  • Not nesting under category (IDENTITY)
  • Using array instead of object for documents
  • Using idNumber instead of primaryIdentifier

Entity Not Found (404)

Problem: Entity not found Solutions:

No Results in Portal

Problem: Can’t find individual in Portal Solutions:

Bruno-Specific Issues

Collection Not Loading:
  • Ensure the folder contains a valid bruno.json file
  • Check file permissions on the collection folder
  • Verify you’re opening the correct folder
Import Issues:
  • Bruno supports Postman Collection v2.1 format
  • If import fails, try exporting from Postman as Collection v2.1
  • Check for special characters in collection name
Environment Variables Not Working:
  • Ensure environment is activated (check dropdown)
  • Verify variable syntax: {{variableName}}
  • Check for typos in variable names

Getting Help

FrankieOne Support:
  • Contact your FrankieOne representative
  • Email: support@frankieone.com
  • Include: Entity ID, full request/response, error messages, screenshots
Documentation:

Next Steps

After Testing v2 APIs

  1. Understand the v2 APIs
    • Review all v2 endpoints
    • Test various scenarios
    • Document requirements
  2. Plan Your Integration
    • Determine which v2 APIs you need
    • Design workflow
    • Plan error handling
    • Consider migration from v1 if applicable
  3. Review Documentation
    • v2 API reference
    • Integration guides
    • Security guidelines
    • Best practices
  4. Start Development
    • Use your test collection as reference
    • Implement in your application
    • Follow v2 payload structure
    • Handle v2 responses correctly
  5. Move to Production
    • Complete UAT testing
    • Get production credentials
    • Update environment variables
    • Deploy

FAQs

General

Use v2 for all new integrations. v2 is the current recommended version with:
  • Better structure for complex scenarios
  • Active development and support
  • Clearer entity type separation
  • More explicit field names
v1 is maintained for backward compatibility only.
No. Choose one API version and use it consistently throughout your integration.
Bruno is completely free and open-source. Postman has a free tier that’s sufficient for testing FrankieOne v2 APIs.
No. Always use testbed data. Never use real customer data in testing environments.

v2 Specific

Key differences:
  • Date format: Objects {year, month, day} instead of strings "YYYY-MM-DD"
  • Field names: locality (not suburb or city), subdivision (not state), postalCode (not postcode)
  • Documents: Nested by category documents.IDENTITY[]
  • Entity type: Implied by endpoint (/individuals vs /organizations)
  • Schema version: Optional field schemaVersion: 2 (primarily a response field)
  • Email/Phone: Arrays instead of single values
No. schemaVersion is optional in v2 API requests. It’s marked as readOnly in the OpenAPI specification, meaning it’s primarily a response field returned by the API.You can include "schemaVersion": 2 in your request if you want, but it’s not required. The API will return this field in responses.
v2’s object format provides:
  • More explicit structure
  • Better validation
  • Clearer parsing
  • Support for partial dates
Yes. v2 supports multiple documents per category:

Tool-Specific

  • Postman: Export and share, or use Postman team workspaces
  • Bruno: Share via Git repository (add environment files to .gitignore)
Yes. Bruno can import Postman collections directly (v2.1 format).
Both support automation:
  • Postman: Newman CLI for running collections
  • Bruno: Bruno CLI (bru run) for running collections
Use post-response scripts:Postman:
Bruno:

FrankieOne-Specific

  • UAT: Testing environment with testbed data, safe for experimentation
  • Production: Live environment with real customers, use only after thorough testing
Always test in UAT first.
Customer Child ID (X-Frankie-CustomerChildID) is for sub-account isolation within your main account.You need it if:
  • You have multiple brands or business units
  • You’re a reseller with multiple clients
  • FrankieOne has configured sub-accounts for you
You don’t need it if:
  • You have a single, unified account
  • FrankieOne hasn’t mentioned sub-accounts to you
How to know: Contact your FrankieOne representative to confirm if you have CustomerChildID configured.If you have it: Include the header in all requests:
If you don’t: Omit the header or leave the variable blank.
Check with FrankieOne for specific retention policies. Generally, test data may be periodically cleaned.
Workflows are configured by FrankieOne based on your requirements. Contact your representative to:
  • See available workflows
  • Understand what each workflow does
  • Request custom workflows
Common examples: AUS-Basic1V-IDOnly, AUS-Enhanced-KYC-AML
No. Workflows are configured by FrankieOne. You can only execute workflows via API.

Summary

Key Takeaways

v2 Quick Reference

Minimal v2 Individual:

Getting Started Checklist

1

Install your tool

Install Postman or Bruno
2

Get the v2 collection

Download FrankieOne v2 API collection
3

Import

Import collection into your tool
4

Get credentials

Get API credentials from FrankieOne (UAT)
5

Configure environment

Set up environment variables
6

Review v2 structure

Understand v2 payload format
7

First v2 API call

Create your first individual (v2)
8

Save entityId

Auto-save or manually save entity ID
9

View in Portal

View results in Portal
10

Execute workflow

Test workflow execution
11

Test scenarios

Test different v2 scenarios
12

Document findings

Document your findings and questions
13

Plan integration

Plan your v2 API integration

Additional Resources

FrankieOne

Postman

Bruno


Document Version: 3.1 (v2 Focused - Updated)
Last Updated: February 2026
API Version: v2
Audience: Developers and technical teams evaluating or integrating FrankieOne v2 APIs