API Documentation

Integrate certificate data directly into your ERP, procurement software, or custom applications.

Start Free Trial

Overview

Base URL

/api/v1

Authentication

Bearer Token (API Key)

Rate Limit

100 req/min per org

Authentication

API keys are created in the Org Admin area. Each key has the format cw_... and can be passed via two header options:

# Option 1: Authorization Header
Authorization: Bearer cw_abc123def456...

# Option 2: X-API-Key Header
X-API-Key: cw_abc123def456...

API keys are stored server-side as SHA-256 hashes. The plaintext key is only shown once at creation — keep it safe.

Endpoint

GET/api/v1/certificate/{number}

Retrieves the current status of a certificate. The certificate must exist in the API key's organization.

Name

Name	Type	Description
number	string (path)	Certificate number, e.g. ISCC-EU-1234

Example Response (200)

{
  "cert_number": "ISCC-EU-1234",
  "status": "valid",
  "valid_until": "31.12.2026",
  "last_checked": "2026-02-12T08:30:00.000Z"
}

Note: For NIS certificates (manually entered), the field last_checked is missing since they are not automatically checked.

Error Responses

Status	Description
401	API key missing or invalid
404	Certificate not found (in this organization)
429	Rate limit exceeded (check Retry-After header)

Example with curl

curl -H "Authorization: Bearer cw_YourApiKey..." \
  https://www.certificatewatch.com/api/v1/certificate/ISCC-EU-1234

Rate Limiting

The API allows 100 requests per minute per organization. Current usage is communicated via response headers:

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 97
Retry-After: 42  (only on 429)

When the limit is exceeded, you receive a 429 response. Wait the time indicated in the Retry-After header (in seconds) before retrying.

API Notice

The API returns the latest known status based on external sources and/or manual inputs. No warranty. For authoritative information, verify the original source/certificate documents. See our Terms of Use for details.

API Documentation

Overview

Authentication

Endpoint

Name

Example Response (200)

Error Responses

Example with curl

Rate Limiting

API Notice

Get API Access