Verification API

A single public, unauthenticated endpoint returns the full evidence record for a certificate: issuer, fingerprint, status, and the immutable audit trail. No key required — verification must never depend on trusting us with credentials.

GET /api/public/verify/:slug

cURL
curl -s https://your-app.lovable.app/api/public/verify/tru-9f42-1187-ac03
JavaScript
const res = await fetch("https://your-app.lovable.app/api/public/verify/tru-9f42-1187-ac03");
const record = await res.json();
Python
import requests
record = requests.get("https://your-app.lovable.app/api/public/verify/tru-9f42-1187-ac03").json()

Response schema

  • found — whether the reference exists
  • status — verified · pending · transferring · revoked
  • confidence — green · yellow · red · gray
  • certificate — serial, signature, algorithm, issue and expiry
  • origin — title, issuer, jurisdiction, SHA-256 hash
  • audit[] — append-only event history

Status codes: 200 record found · 404 unknown reference · 500 verification service error. CORS is open for browser-side integration.