Third-Party Verification & Integration API

High-throughput, HMAC-SHA256 authenticated RESTful endpoints for enterprise ERPs, warehouse barcode terminals, distributor scanners, and third-party mobile apps.

Pre-seeded Test API Key: vt_live_948194e8a1c94b7c89f2a0 Rate limit: 120 req/min • Replay Protected

Authentication & Request Headers

Header Key Required Type Description
X-API-Key Required String Your issued vt_live_... API access key.
Content-Type Required String Must be application/json for POST bodies.
X-VeriTag-Signature Optional (Strict Mode) String (Hex) HMAC-SHA256 hash of timestamp + '.' + rawPayload with secret key.
X-VeriTag-Timestamp Optional (Strict Mode) Integer (Unix) Current Unix timestamp in seconds. Replay protection window: 300 seconds.
POST /v1/scan High-Priority Scan Telemetry

Verifies tag authenticity, executes timing-safe HMAC validation, records scan coordinates and IP audit logs, and returns duplicate warning flags.

Request Body (JSON)
{
  "tag_code": "VTG-INS-89A1-33F2-003",
  "location": "Tokyo Narita Airport Customs Port",
  "latitude": 35.771986,
  "longitude": 140.392854
}
Response (200 OK)
{
  "status": "success",
  "code": 200,
  "message": "Verification completed with result: GENUINE",
  "data": {
    "result": "GENUINE",
    "title": "Verified 100% Genuine Product",
    "verification_count": 1,
    "product": {
      "product_name": "AuraCure Bio-Insulin 100IU/ml",
      "sku": "PHARM-INS-2026-X1",
      "batch_number": "LOT-99218-A",
      "expiry_date": "2028-01-15",
      "business_name": "Aura BioPharma Laboratories"
    }
  }
}
GET /v1/products

Query registered product specifications, SKUs, active manufacturer certificates, and current status.

Query Parameters
?sku=PHARM-INS-2026-X1 • ?q=Insulin
curl -X GET "https://app.veritagin.com/api/v1/products" \
  -H "X-API-Key: vt_live_948194e8a1c94b7c89f2a0"
POST /v1/auth

Exchange developer API key and secret for verification status, rate limits, and client identity.

Request Payload
curl -X POST "https://app.veritagin.com/api/v1/auth" \
  -H "Content-Type: application/json" \
  -d '{"api_key":"vt_live_948194e8a1c94b7c89f2a0", "api_secret":"vt_sec_7891230198421049120"}'

Interactive API Sandbox & Console

Test real-time scan verification directly from your browser
Live Sandbox
Live Server Response Output Awaiting Request
// Click "Send API Request" to execute query...