The registry, the hash and the recomputation routine are public. Our server is a convenience, not a dependency — if it disappears, a printed label still verifies.
Every issued label gets an ID, a hash, an issue date and a revocation slot. Revoked labels stay listed with the date and reason.
Open the registry →The verification page re-derives fnv(prev + payload) locally. No data leaves the page;
the check does not need a network round trip.
Quote, lead and registry endpoints, JSON over HTTPS. A buyer's system can pull the label record directly instead of scanning a PDF.
API reference →batch | total_kgCO2e | per_unit | gradehash = fnv(prev_hash + payload) — the previous label's hash is committed, so the set is append-only| Method | Path | Purpose |
|---|---|---|
| POST | /api/quote | Deterministic fee model — the same one used by the site calculator |
| POST | /api/leads | Validated enquiry capture; returns a reference ID |
| GET | /api/leads?token=… | Lead list (admin token required) |
| GET | /api/rates | Published fee table |
| GET | /api/health | Liveness and counters |
We publish the schema and the model. Nothing about the fee is a secret; the verification is what you are buying.