Build with certify

Integrate credential verification, issuance, and management into your applications. Full REST API, SDKs in 6 languages, webhooks, and a comprehensive sandbox environment.

Try Playground →Full API Docs

Quick Start

3 EXAMPLES

// 1. Verify a credential — single hash
import { CertifyClient } from '@certify/sdk';

const client = new CertifyClient({
  apiKey: process.env.CERTIFY_API_KEY,
  baseUrl: 'https://api.certify.ma/v1'
});

const result = await client.verify({
  hash: 'sha256:a8f2e1b3c4d5...'
});

console.log(result.valid);       // true
console.log(result.credential);  // { name, degree, institution, ... }

Official SDKs

JavaScript / Node.js

Full-featured SDK for Node.js and browser environments. TypeScript support included.

npm install @certify/sdk

v2.4.112.4K/mo

Python

Python SDK with async support. Compatible with Django, Flask, and FastAPI.

pip install certify-sdk

v1.8.08.9K/mo

PHP

PHP SDK for Laravel, Symfony, and WordPress. PSR-7/PSR-18 compliant.

composer require certify/sdk

v1.2.33.1K/mo

Java / Kotlin

JVM SDK for Spring Boot and Android applications. Retrofit-based.

implementation "ma.certify:sdk:1.1.0"

v1.1.02.1K/mo

Go

Go module with context support and connection pooling for high-performance services.

go get github.com/certify-ma/go-sdk

v0.9.21.5K/mo

Ruby

Ruby gem for Rails applications. Active Support integration included.

gem install certify-sdk

v0.7.1890/mo

API Endpoints

Full REST API supporting all credential types in the Moroccan education system.

Method	Endpoint	Description	Auth
GET	/api/credentials	List credentials with filters	API Key
GET	/api/credentials/stats	Aggregated platform statistics	Public
GET	/api/credentials/verify/:hash	Verify a single credential by SHA-256	Public
POST	/api/credentials/batch-verify	Batch verify multiple hashes	API Key
POST	/api/credentials/issue	Issue a new verifiable credential	Issuer Key
GET	/api/institutions	List all institutions with counts	Public
POST	/api/share/create	Create a credential share link	API Key
GET	/api/share/:token	Access a shared credential	Public
POST	/api/requests	Submit a credential request	Student Key

Supported Credential Types

All credential types supported by the API, mapped to their Prisma enums and EQF levels.

API Type	Prisma Enum	EQF	Description
BachelorDegree	BACHELOR_DEGREE	6	Licence (L1-L3)
MasterDegree	MASTER_DEGREE	7	Master (M1-M2)
DoctorateDegree	DOCTORATE	8	Doctorat / PhD
Ingenieur	INGENIEUR	7	Diplôme d'Ingénieur d'État
Baccalaureat	BACCALAUREAT	4	Baccalauréat du Maroc
OFPPTDiploma	OFPPT_DIPLOMA	5	Technicien Spécialisé OFPPT
DUT	DUT	5	Diplôme Universitaire de Technologie
BTSDiploma	BTS_DIPLOMA	5	Brevet de Technicien Supérieur
LicencePro	LICENCE_PRO	6	Licence Professionnelle
DEUG	DEUG	5	Diplôme d'Études Universitaires Générales
Certificate	CERTIFICATE	-	Professional/Corporate Certificate
Badge	BADGE	-	Digital Badge (Open Badges v3)
MicroCredential	MICRO_CREDENTIAL	-	Micro-Credential / Skill Badge
Transcript	TRANSCRIPT	-	Relevé de Notes
Attestation	ATTESTATION	-	Attestation de Réussite / Scolarité
Diploma	DIPLOMA	-	Generic Diploma

Webhook Events

Subscribe to real-time events. All payloads include a HMAC-SHA256 signature for verification.

credential.issued

Fired when a new credential is created and signed

{ credentialId, type, institutionId, studentId, sha256Hash }

credential.verified

Fired when a credential is verified via API or web

{ sha256Hash, verifiedAt, source, ipCountry }

credential.revoked

Fired when a credential is revoked by the issuer

{ credentialId, revokedAt, reason, revokedBy }

credential.shared

Fired when a share link is created or accessed

{ shareId, credentialId, viewCount, expiresAt }

institution.created

Admin event: new institution onboarded

{ institutionId, name, type, tier }

batch.completed

Fired when a batch verification job completes

{ batchId, total, verified, notFound, revoked }

Rate Limits & Pricing

Morocco CDN endpoints for lowest latency. All plans include unlimited public verifications.

Free

Rate: 100/day

Batch: 10 hashes

Verify: ∞

Support: Community

Pro

490 MAD/mo

Rate: 1,000/min

Batch: 100 hashes

Verify: ∞

Support: Email

Enterprise

Custom

Rate: 10,000/min

Batch: 500 hashes

Verify: ∞

Support: 24/7 SLA

Morocco-Specific Integration

Special considerations for Moroccan developers and institutions.

CNDP Compliance

All API responses conform to CNDP (Commission Nationale de Contrôle de la Protection des Données) requirements. PII is minimized in public endpoints.

Multi-Language Support

Credential names available in French, Arabic, and English. API supports Accept-Language header for localized responses.

Institution Types

12 institution types: University, Grande École, OFPPT ISTA, CPGE, BTS Center, Primary/Middle/High School, Corporate Academy, Professional Association.

Morocco Grading Scale

Full support for the /20 grading system. GPA fields accept format "XX.X/20". Honors mapped to French mentions (Passable, AB, Bien, TB).

Payment Integration

CMI (Centre Monétique Interbancaire) payment gateway for Moroccan card payments. MAD currency support for subscription billing.

Data Residency

All credential data stored in Morocco-based servers (OVH Rabat DC). GDPR and Law 09-08 compliant. No cross-border data transfer.

Error Codes Reference

All API errors follow a consistent format with machine-readable codes and human-readable messages.

Code	Status	Description	Action
CREDENTIAL_NOT_FOUND	404	Hash does not match any credential	Check hash format
CREDENTIAL_REVOKED	410	Credential was revoked by issuer	Contact institution
INVALID_HASH	400	Hash format is not valid SHA-256	Ensure hex format, 64 chars
RATE_LIMIT_EXCEEDED	429	Too many requests	Upgrade plan or wait
AUTH_INVALID	401	API key is invalid or expired	Regenerate key
BATCH_TOO_LARGE	413	Batch exceeds maximum size	Split into smaller batches
INSTITUTION_NOT_FOUND	404	Institution ID does not exist	Check /api/institutions
FORBIDDEN	403	Insufficient permissions	Request higher role

Authentication

certify uses API keys for authentication. Include your key in the Authorization header.

// API Key Authentication
fetch('https://api.certify.ma/v1/credentials', {
  headers: {
    'Authorization': 'Bearer crt_live_xxxxxxxxxxxxxxxxxx',
    'Content-Type': 'application/json',
    'Accept-Language': 'fr-MA'  // Response in French
  }
});

// OAuth 2.0 (for ATS integrations)
// 1. Register your app at dashboard.certify.ma
// 2. Redirect users to: https://certify.ma/oauth/authorize
// 3. Exchange code for access token
// 4. Use token in Authorization header

API Changelog

Recent API changes and version history.

v2.4

2025-12-01

Added QR code verification endpoint

Batch verify now supports Excel files

New webhook: credential.shared

v2.3

2025-09-15

OFPPT credential types added

Arabic transliteration in responses

Rate limit headers in all responses

v2.2

2025-06-01

W3C VC v2.0 compliance

StatusList2021 revocation

EDCI/Europass integration

v2.1

2025-03-01

Batch verification API

Webhook HMAC signatures

Institution onboarding API

Sandbox Environment

Test your integration without affecting production data. The sandbox mirrors all production endpoints.

Base URL

https://sandbox.certify.ma/v1

API Key Prefix

crt_test_xxxxxxxxxx

Pre-seeded Data

25 credentials, 8 institutions

Rate Limit

100 req/min (no restrictions)

Webhook Test

Instant replay available

Reset

Auto-reset every 24 hours

Community & Resources

Join the certify developer community and access additional resources.

GitHub

Open-source SDK repositories, sample apps, and issue tracker.

github.com/certify-ma

Discord Community

2,000+ developers sharing integrations, tips, and getting help.

discord.gg/certify

Developer Blog

Tutorials, case studies, and API changelog announcements.

blog.certify.ma/dev

Status Page

Real-time API uptime monitoring. 99.95% SLA on Enterprise tier.

status.certify.ma

Postman Collection

Pre-built API collection for testing. Import in one click.

postman.com/certify

Stack Overflow

Tag: [certify-api]. Community Q&A for common integration issues.

stackoverflow.com/tags/certify-api

Ready to Build?

Get your API key in 30 seconds. Free tier includes 100 requests/day — no credit card required.

Full API Reference Verify Hub