🔌 API Reference

# Certify a SHA-256 hash in one request
curl -X POST https://certify.sbix.io/api/certify \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"leaves":["e3b0c44298fc1c149afbf4c8996fb924..."], "leaves_hashed": true}'

Authorization: Bearer sbix_live_xxxxxxxxxxxxxxxx

sbix_live_<64_hex_characters>

Example:
sbix_live_7efbd6230039b2dd745b1c4334ef1713a770f245204476a5b881eef0b32c4fc6

curl -X POST https://certify.sbix.io/api/v1/check \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -F "file=@artwork.png"

curl -X POST https://certify.sbix.io/api/v1/check \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"image_url": "https://ipfs.io/ipfs/QmXxx..."}'

{
  "success": true,
  "data": {
    "alert": "CLEAN",
    "is_original": true,
    "confidence": 95,
    "trust_index": 95,
    "decision_reason": "no_match found in index",
    "best_match": null,
    "matches": [],
    "thresholds": { "exact": 5, "close": 10, "similar": 16, "weak": 20,
                    "max_distance_used": 16, "include_weak": false },
    "db_size": 38501,
    "checked_at": "2026-03-04T11:28:13Z"
  }
}

{
  "success": true,
  "data": {
    "alert": "EXACT",
    "is_original": false,
    "confidence": 0,
    "trust_index": 0,
    "decision_reason": "best_match=EXACT distance=0 platform=teia proof_id=teia_871500",
    "best_match": {
      "proof_id": "teia_871500",
      "platform": "teia",
      "filename": "Cost",
      "match_type": "EXACT",
      "distance": 0,
      "similarity_percent": 100.0,
      "first_indexed_at": "2026-03-04T11:35:29Z",
      "verify_url": "https://verify.sbix.io/verify/teia_871500"
    },
    "matches": [ ... ],
    "thresholds": { "exact": 5, "close": 10, "similar": 16, "weak": 20,
                    "max_distance_used": 16, "include_weak": false },
    "db_size": 38501,
    "checked_at": "2026-03-04T11:43:37Z"
  }
}

async function checkBeforeListing(imageFile) {
  const formData = new FormData();
  formData.append('file', imageFile);

  const res = await fetch('https://certify.sbix.io/api/v1/check', {
    method: 'POST',
    headers: { 'Authorization': 'Bearer YOUR_API_KEY' },
    body: formData
  });

  const { data } = await res.json();

  if (data.alert === 'EXACT') {
    // Block listing — show verify_url to user
    return { allowed: false, reason: data.decision_reason,
             proof: data.best_match.verify_url };
  }
  if (data.alert === 'COPY') {
    // Flag for manual review
    return { allowed: false, reason: 'Similar image detected', flag: true };
  }
  // SIMILAR or CLEAN — allow with trust_index
  return { allowed: true, trust_index: data.trust_index };
}

curl -X POST https://certify.sbix.io/api/certify \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "leaves": ["e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"],
    "filename": "contract_v3.pdf",
    "leaves_hashed": true
  }'

curl -X POST https://certify.sbix.io/api/certify \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "leaves": [
      "hash_of_document_1",
      "hash_of_document_2",
      "hash_of_document_3"
    ],
    "filename": "daily_batch_2026-02-01",
    "case_reference": "AUDIT-Q1-2026",
    "leaves_hashed": true
  }'

{
  "message": "Proof successfully generated",
  "proof_id": "proof_9cec4ed9a95e4ed8",
  "merkle_root": "6e8f29ea62064465c81ff096609953345a8475f0cb53324833e7ea7a0604593f",
  "timestamp": "2026-02-01T13:24:55.348703Z",
  "tsa_type": "eIDAS Qualified",
  "eidas_qualified": true
}

import requests
import hashlib

API_KEY = "sbix_live_your_key_here"

# Hash a file locally
with open("document.pdf", "rb") as f:
    file_hash = hashlib.sha256(f.read()).hexdigest()

# Certify
response = requests.post(
    "https://certify.sbix.io/api/certify",
    headers={"Authorization": f"Bearer {API_KEY}"},
    json={
        "leaves": [file_hash],
        "filename": "document.pdf",
        "leaves_hashed": True
    }
)

result = response.json()
print(f"Proof ID: {result['proof_id']}")
print(f"Verify:   https://verify.sbix.io/verify/{result['proof_id']}")

const crypto = require('crypto');
const fs = require('fs');

const API_KEY = 'sbix_live_your_key_here';

// Hash a file
const fileHash = crypto.createHash('sha256')
  .update(fs.readFileSync('document.pdf'))
  .digest('hex');

// Certify
const response = await fetch('https://certify.sbix.io/api/certify', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${API_KEY}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    leaves: [fileHash],
    filename: 'document.pdf',
    leaves_hashed: true
  })
});

const result = await response.json();
console.log(`Proof: ${result.proof_id}`);

curl https://certify.sbix.io/api/proof/proof_9cec4ed9a95e4ed8 \
  -H "Authorization: Bearer YOUR_API_KEY"

curl https://certify.sbix.io/api/v1/verify/proof_9cec4ed9a95e4ed8

{
  "success": true,
  "data": {
    "verified": true,
    "certificate": {
      "proof_id": "proof_9cec4ed9a95e4ed8",
      "file_hash": "e3b0c44...",
      "has_eidas": true,
      "created_at": "2026-02-01T13:24:55Z",
      "blockchain_anchors": {
        "tezos": "oo...",
        "aleph": "Qm..."
      }
    }
  }
}

curl -o evidence_pack.zip \
  https://certify.sbix.io/api/v1/certificates/proof_9cec4ed9a95e4ed8/evidence-pack \
  -H "Authorization: Bearer YOUR_API_KEY"

https://verify.sbix.io/verify/proof_bb0593e0d35c434f

# Verify the RFC-3161 timestamp independently
openssl ts -verify -in timestamp.tsr -data proof.json

# Check all Evidence Pack files
sha256sum -c sha256sums.txt

{
  "error": "Description of the problem"
}