GETMethod GET/products/{uid}/public

You read the public information of a product from its identifier. By the end of this page, you will know how to retrieve its name, the name and logo of its brand, an image, its token number, its registration transaction, its state, and whether it is reported stolen.

Full address:

GET https://api.sealtrust.io/v1/products/{uid}/public

The same endpoint also answers without the /v1 prefix, at https://api.sealtrust.io/products/{uid}/public. Both addresses call the same code. Use the /v1 form for a new integration.

#Authorization

None, public endpoint. This endpoint reads no API key, no token and no cookie. The server never looks at the Authorization header you send here, and it returns the same response to you with or without it.

#Call limit

600 calls per 60-second window, counted per calling network address. The limit is wide because hundreds of visitors at a trade fair or on a mobile network often share one address. This counter is this read's own. The /v1 prefix does not create a second budget: /products/{uid}/public and /v1/products/{uid}/public share the same counter.

Every response carries three headers.

#Path and query parameters

The four forms are those of GET /resolve/{identifier}, described in detail on the page of that endpoint. The server tries the chip hash first, then the token id, then the serial number, then the certificate number, and returns the first product it finds.

You can send the chip hash with or without the 0x prefix, in uppercase or in lowercase. The server strips the leading and trailing spaces before searching, puts the value in lowercase and adds the 0x prefix if it is missing. So these spellings all designate the same product. The serial number too is accepted in uppercase as well as in lowercase.

A single query parameter, lang, and it is optional. It changes one thing in the response: the language of category_name. Everything else is identical whatever its value.

The server picks the language in this order: the lang parameter when it is fr or en, otherwise the first recognised tag of the Accept-Language header, otherwise en. A value the server does not recognise is ignored without an error: you get en, and not a 422.

#Headers

No header is required.

#Request body

None. This request has no body.

#Example request

Reading the product whose identifier is 0x1111111111111111111111111111111111111111111111111111111111111111.

curl -i "https://api.sealtrust.io/v1/products/0x1111111111111111111111111111111111111111111111111111111111111111/public"

const uid =
  "0x1111111111111111111111111111111111111111111111111111111111111111";

const response = await fetch(
  `https://api.sealtrust.io/v1/products/${encodeURIComponent(uid)}/public`,
  { method: "GET" },
);

if (!response.ok) {
  throw new Error(`SealTrust replied ${response.status}`);
}

const product = await response.json();

console.log(product.product_name, product.brand_name);
console.log(product.is_verified, product.declared_stolen);

import requests
from urllib.parse import quote

uid = "0x1111111111111111111111111111111111111111111111111111111111111111"

response = requests.get(
    f"https://api.sealtrust.io/v1/products/{quote(uid, safe='')}/public",
    timeout=30,
)

print(response.status_code)
print(response.json())

#Example response

HTTP code 200.

{
  "product_name": "Example Model Bag",
  "brand_name": "Exemple SAS",
  "brand_logo_url": "https://example-sas.test/logo.png",
  "brand_hide_powered_by": false,
  "image_url": "https://example-sas.test/media/sac-modele-example.jpg",
  "category_name": "Maroquinerie",
  "token_id": "11111111111111111111111111111111111111111111111111111111111111111111111111111",
  "tx_hash": "0x2222222222222222222222222222222222222222222222222222222222222222",
  "status": "written",
  "declared_stolen": false,
  "is_verified": true,
  "registered_at": "2026-03-04T10:22:31.481000+00:00",
  "verified_at": "2026-03-04T10:22:31.481000+00:00",
  "certificate_status": "active",
  "contract_address": "0x3333333333333333333333333333333333333333",
  "chain": null
}

The response has sixteen fields and nothing else.

#Reading the state of a product

status carries a technical value. This page documents two of them, because the rest of the response depends on them: mined and written are the only two values for which is_verified is true.

Read is_verified and declared_stolen rather than interpreting status yourself. declared_stolen exists precisely for that: status carries the value stolen at the moment of a fresh report, then takes the value written back as soon as the theft case is closed, while declared_stolen says in a field of its own whether a report is open.

#Errors

The body of an error response carries a detail field.

This endpoint is public: it returns neither 401 nor 403.

#See also

• GET /resolve/{identifier}, read in a single call everything a product page displays.
• GET /timeline/{identifier}, read the public history of a product.
• GET /certificate/{identifier}, read the certificate of authenticity of an item.
• Core concepts, tell model, batch and item apart before ordering a single label.