Skip to main content
The API lives at https://api.qedproof.site. It’s a small, deliberately narrow surface: Requests and responses are JSON. See authentication for how to get and use an API key, and errors for how failures are reported. Receipt reads need no API key by design — a receipt is meant to be shared and checked by anyone, including someone who was never given a key.

Rate limits

Claim submission and claim-status reads are limited per API key. Receipt reads are limited per IP address instead, since they need no key. Exceeding either limit returns 429 with a Retry-After header.

Request size

The request body is capped; a request over the limit is rejected with 413 before it’s parsed. Claim params is separately capped at 4096 bytes of JSON — see claims.