> ## Documentation Index > Fetch the complete documentation index at: https://docs.closient.com/llms.txt > Use this file to discover all available pages before exploring further. # Assign claim to product > Create a new claim assignment for a product. Returns ``201`` with the created assignment on success; ``404`` if the GTIN or ``claim_id`` does not exist; ``409`` if the claim is already assigned to this product (the (product, claim) pair is unique). ## OpenAPI ````yaml /openapi/openapi-certifications.json post /certifications/api/v1/products/{gtin}/claims openapi: 3.1.0 info: title: Certifications API version: 1.0.0 description: > Product certifications and claims: organic, fair trade, non-GMO, and more. ## Authentication All endpoints require an API key passed via the `X-API-Key` HTTP header, unless otherwise noted. ``` X-API-Key: csb__ ``` Generate API keys in **Settings > API Keys** in your dashboard, or via the Account API. Session-based (cookie) authentication is also accepted for browser-based access. ## Rate Limits | Tier | Requests / minute | Requests / day | |-------------|-------------------|----------------| | Default | 300 | 10,000 | | Custom | Contact us | Contact us | Rate-limit headers are included on every response so callers can self-throttle without hitting our 429s ("informed governor"): - `RateLimit-Policy` — every active window, e.g. `300;w=60, 10000;w=86400` - `RateLimit-Limit` — quota for the **most-restrictive** currently-active window - `RateLimit-Remaining` — requests left in that window - `RateLimit-Reset` — seconds until that window resets (relative; clock-skew safe) Legacy `X-RateLimit-*` aliases are also emitted for back-compat. `X-RateLimit-Reset` keeps the absolute Unix-timestamp shape to avoid breaking existing consumers. When rate-limited, you receive `429 Too Many Requests` with a `retry_after_seconds` field in the error envelope and a `Retry-After` header. ## Pagination List endpoints return paginated results in this envelope: ```json { "data": [...], "pagination": { "page": 1, "page_size": 25, "total_count": 342, "total_pages": 14, "has_next": true, "has_previous": false } } ``` Use `?page=2&page_size=50` query parameters. Maximum page size is 100. ## Error Responses All errors conform to [RFC 9457 Problem Details](https://www.rfc-editor.org/rfc/rfc9457) with `Content-Type: application/problem+json`: ```json { "type": "https://closient.com/docs/errors/not_found", "title": "Not Found", "status": 404, "detail": "The requested resource was not found.", "error_code": "not_found", "retryable": false, "timestamp": "2026-03-31T12:00:00+00:00" } ``` Common error codes: `unauthorized` (401), `forbidden` (403), `not_found` (404), `validation_error` (422), `rate_limited` (429), `internal_error` (500). termsOfService: https://www.closient.com/terms/ servers: - url: https://www.closient.com security: [] tags: - name: Certification Bodies description: Certification issuing organizations. - name: Certifications description: Certification definitions. - name: Claims description: Product claim definitions. - name: Assignments description: Product certification and claim assignments. externalDocs: description: Closient Documentation url: https://docs.closient.com paths: /certifications/api/v1/products/{gtin}/claims: post: tags: - Assignments summary: Assign claim to product description: >- Create a new claim assignment for a product. Returns ``201`` with the created assignment on success; ``404`` if the GTIN or ``claim_id`` does not exist; ``409`` if the claim is already assigned to this product (the (product, claim) pair is unique). operationId: apps_certifications_api_create_product_claim parameters: - in: path name: gtin schema: description: >- GTIN-8, GTIN-12, GTIN-13, or GTIN-14 barcode digits (no spaces, no hyphens). Shorter forms are zero-left-padded to GTIN-14 server-side. Returns ``404`` if no product matches the normalized GTIN. maxLength: 14 minLength: 8 pattern: ^\d{8,14}$ title: Gtin type: string required: true description: >- GTIN-8, GTIN-12, GTIN-13, or GTIN-14 barcode digits (no spaces, no hyphens). Shorter forms are zero-left-padded to GTIN-14 server-side. Returns ``404`` if no product matches the normalized GTIN. requestBody: content: application/json: schema: $ref: '#/components/schemas/ClaimAssignmentCreateIn' required: true responses: '201': description: Created content: application/json: schema: $ref: '#/components/schemas/ClaimAssignmentOut' '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ErrorOut' '409': description: Conflict content: application/json: schema: $ref: '#/components/schemas/ErrorOut' security: - APIKeyHeaderAuth: [] - OAuthTokenAuth: [] - SessionAuth: [] components: schemas: ClaimAssignmentCreateIn: description: |- Request body for ``POST /products/{gtin}/claims``. Creates a new :class:`ClaimAssignment` linking the GTIN's product to the claim identified by ``claim_id``. Returns ``409 Conflict`` if the assignment already exists. examples: - claim_id: a1b2c3d4-e5f6-7890-abcd-ef1234567890 metadata: order_id: '6735' source: BRAND_SELF_DECLARED properties: metadata: anyOf: - additionalProperties: type: string type: object - type: 'null' description: >- Developer-attached key/value data. Send {} or null to clear. Empty-string values delete that key. Omitted keys are preserved. title: Metadata claim_id: description: >- UUID of the :class:`Claim` to assign. Use the ``id`` field from ``GET /claims/{id}``. format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Claim Id type: string source: allOf: - $ref: '#/components/schemas/ClaimSourceEnum' default: BRAND_SELF_DECLARED description: >- How the claim is asserted. Defaults to ``BRAND_SELF_DECLARED`` for brand-supplied data; set to ``THIRD_PARTY_VERIFIED`` when an audit trail backs the claim. valid_from: anyOf: - format: date type: string - type: 'null' description: Start of validity for this claim (ISO 8601). Optional. title: Valid From expiration_date: anyOf: - format: date type: string - type: 'null' description: >- End of validity for this claim (ISO 8601). Optional; ``null`` = open-ended. title: Expiration Date evidence_url: default: '' description: >- URL to supporting evidence (third-party certificate scan, lab report, supplier letter). Empty when the source is ``BRAND_SELF_DECLARED`` and no evidence exists. title: Evidence Url type: string evidence_note: default: '' description: Free-text notes about the evidence. Empty when not provided. title: Evidence Note type: string required: - claim_id title: ClaimAssignmentCreateIn type: object ClaimAssignmentOut: description: |- A claim assigned to a specific product. Mirrors :class:`apps.certifications.models.ClaimAssignment`. Most fields proxy through to the linked :class:`Claim` record; ``source``, ``valid_from``, ``expiration_date``, and ``metadata`` carry the per-instance state. Like :class:`CertificationAssignmentOut`, ``id`` and ``id`` are the **claim's** identifiers (not the assignment's), so callers can deep-link to the claim record. examples: - category: INGREDIENT_ABSENCE code: NON_GMO expiration_date: '2025-12-31' id: a1b2c3d4-e5f6-7890-abcd-ef1234567890 label: Non-GMO metadata: order_id: '6735' source: BRAND_SELF_DECLARED valid_from: '2024-01-01' properties: metadata: additionalProperties: type: string description: >- Developer-attached key/value data attached to this object. Up to 50 keys; key max 40 chars, value max 500 chars. title: Metadata type: object id: description: >- URL-safe 22-character shortuuid encoding of the row's UUID primary key. Stable across the row's lifetime; suitable for sharing in URLs, log lines, and external SDK clients. Accepted on input as either the shortuuid form or the canonical UUID form (``xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx``). format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Id type: string label: description: Display name of the underlying claim (e.g. ``Non-GMO``). maxLength: 100 title: Label type: string code: description: Stable code of the underlying claim (e.g. ``NON_GMO``). maxLength: 50 title: Code type: string category: $ref: '#/components/schemas/ClaimCategoryEnum' description: >- Category of the underlying claim. See :class:`ClaimCategoryEnum` for the full set of values. source: $ref: '#/components/schemas/ClaimSourceEnum' description: >- How the claim is asserted. ``BRAND_SELF_DECLARED`` means the brand states the claim without third-party verification; ``THIRD_PARTY_VERIFIED`` means an independent body has verified it. valid_from: anyOf: - format: date type: string - type: 'null' description: >- Start of validity for this claim (ISO 8601). ``null`` when no start date was recorded — treat as 'valid since unknown date'. title: Valid From expiration_date: anyOf: - format: date type: string - type: 'null' description: >- End of validity for this claim (ISO 8601). ``null`` for claims with no scheduled expiry. title: Expiration Date required: - id - label - code - category - source title: ClaimAssignmentOut type: object ErrorOut: description: |- RFC 9457 Problem Details response. All API errors are returned in this format with Content-Type: application/problem+json. examples: - detail: The requested resource was not found. error_code: not_found retryable: false status: 404 timestamp: '2026-03-31T12:00:00+00:00' title: Not Found type: https://closient.com/docs/errors/not_found - detail: Validation error. details: - loc: - body - name msg: Field required type: missing error_code: validation_error retryable: false status: 422 timestamp: '2026-03-31T12:00:00+00:00' title: Validation Error type: https://closient.com/docs/errors/validation_error - detail: Rate limit exceeded. Please try again later. error_code: rate_limited retry_after: 31 retryable: true status: 429 timestamp: '2026-03-31T12:00:00+00:00' title: Rate Limited type: https://closient.com/docs/errors/rate_limited properties: type: description: URI reference identifying the error type. title: Type type: string title: description: Short human-readable summary of the error. title: Title type: string status: description: HTTP status code. title: Status type: integer detail: description: Human-readable explanation of this specific occurrence. title: Detail type: string error_code: description: Machine-readable error code (e.g. not_found, unauthorized). title: Error Code type: string retryable: default: false description: Whether retrying the same request can succeed. title: Retryable type: boolean timestamp: description: ISO 8601 timestamp of when the error occurred. title: Timestamp type: string retry_after: anyOf: - type: integer - type: 'null' description: Seconds to wait before retrying (when applicable). title: Retry After owner_action_required: anyOf: - type: boolean - type: 'null' description: Whether the error requires account owner intervention. title: Owner Action Required details: description: Additional context (validation errors, etc.). title: Details required: - type - title - status - detail - error_code - timestamp title: ErrorOut type: object ClaimSourceEnum: description: |- Mirror of :class:`apps.certifications.models.ClaimAssignment.Source`. Indicates whether the claim is asserted by the brand itself or has been verified by a third party. Defaults to ``BRAND_SELF_DECLARED`` on the create endpoint. Mirror the ``TextChoices`` values on the model exactly. enum: - BRAND_SELF_DECLARED - THIRD_PARTY_VERIFIED title: ClaimSourceEnum type: string ClaimCategoryEnum: description: |- Mirror of :class:`apps.certifications.models.Claim.Category`. Defines the high-level grouping a claim falls under. Used by :class:`Claim`, :class:`ClaimListOut`, :class:`ClaimAssignmentOut`, and the ``category`` filter on the claims list endpoint. Keep these identifiers identical to the ``TextChoices`` values on the model; Django stores the literal string in the column. enum: - DIETARY - INGREDIENT_ABSENCE - ALLERGEN_FREE - PROCESS - SUSTAINABILITY - OTHER title: ClaimCategoryEnum type: string securitySchemes: APIKeyHeaderAuth: type: apiKey in: header name: X-API-Key OAuthTokenAuth: type: http scheme: bearer SessionAuth: type: apiKey in: cookie name: sessionid ````