> ## Documentation Index > Fetch the complete documentation index at: https://docs.closient.com/llms.txt > Use this file to discover all available pages before exploring further. # List product claims > Retrieve every claim (e.g. ``Non-GMO``, ``Vegan``) assigned to a product, with source (self-declared / third-party-verified) and validity dates. Returns ``404`` when no product matches the GTIN. ## OpenAPI ````yaml /openapi/openapi-certifications.json get /certifications/api/v1/products/{gtin}/claims openapi: 3.1.0 info: title: Certifications API version: 1.0.0 description: > Product certifications and claims: organic, fair trade, non-GMO, and more. ## Authentication All endpoints require an API key passed via the `X-API-Key` HTTP header, unless otherwise noted. ``` X-API-Key: csb__ ``` Generate API keys in **Settings > API Keys** in your dashboard, or via the Account API. Session-based (cookie) authentication is also accepted for browser-based access. ## Rate Limits | Tier | Requests / minute | Requests / day | |-------------|-------------------|----------------| | Default | 300 | 10,000 | | Custom | Contact us | Contact us | Rate-limit headers are included on every response so callers can self-throttle without hitting our 429s ("informed governor"): - `RateLimit-Policy` — every active window, e.g. `300;w=60, 10000;w=86400` - `RateLimit-Limit` — quota for the **most-restrictive** currently-active window - `RateLimit-Remaining` — requests left in that window - `RateLimit-Reset` — seconds until that window resets (relative; clock-skew safe) Legacy `X-RateLimit-*` aliases are also emitted for back-compat. `X-RateLimit-Reset` keeps the absolute Unix-timestamp shape to avoid breaking existing consumers. When rate-limited, you receive `429 Too Many Requests` with a `retry_after_seconds` field in the error envelope and a `Retry-After` header. ## Pagination List endpoints return paginated results in this envelope: ```json { "data": [...], "pagination": { "page": 1, "page_size": 25, "total_count": 342, "total_pages": 14, "has_next": true, "has_previous": false } } ``` Use `?page=2&page_size=50` query parameters. Maximum page size is 100. ## Error Responses All errors conform to [RFC 9457 Problem Details](https://www.rfc-editor.org/rfc/rfc9457) with `Content-Type: application/problem+json`: ```json { "type": "https://closient.com/docs/errors/not_found", "title": "Not Found", "status": 404, "detail": "The requested resource was not found.", "error_code": "not_found", "retryable": false, "timestamp": "2026-03-31T12:00:00+00:00" } ``` Common error codes: `unauthorized` (401), `forbidden` (403), `not_found` (404), `validation_error` (422), `rate_limited` (429), `internal_error` (500). termsOfService: https://www.closient.com/terms/ servers: - url: https://www.closient.com security: [] tags: - name: Certification Bodies description: Certification issuing organizations. - name: Certifications description: Certification definitions. - name: Claims description: Product claim definitions. - name: Assignments description: Product certification and claim assignments. externalDocs: description: Closient Documentation url: https://docs.closient.com paths: /certifications/api/v1/products/{gtin}/claims: get: tags: - Assignments summary: List product claims description: >- Retrieve every claim (e.g. ``Non-GMO``, ``Vegan``) assigned to a product, with source (self-declared / third-party-verified) and validity dates. Returns ``404`` when no product matches the GTIN. operationId: apps_certifications_api_list_product_claims parameters: - in: path name: gtin schema: description: >- GTIN-8, GTIN-12, GTIN-13, or GTIN-14 barcode digits (no spaces, no hyphens). Shorter forms are zero-left-padded to GTIN-14 server-side. Returns ``404`` if no product matches the normalized GTIN. maxLength: 14 minLength: 8 pattern: ^\d{8,14}$ title: Gtin type: string required: true description: >- GTIN-8, GTIN-12, GTIN-13, or GTIN-14 barcode digits (no spaces, no hyphens). Shorter forms are zero-left-padded to GTIN-14 server-side. Returns ``404`` if no product matches the normalized GTIN. responses: '200': description: OK content: application/json: schema: items: $ref: '#/components/schemas/ClaimAssignmentOut' title: Response type: array security: - APIKeyHeaderAuth: [] - OAuthTokenAuth: [] - SessionAuth: [] components: schemas: ClaimAssignmentOut: description: |- A claim assigned to a specific product. Mirrors :class:`apps.certifications.models.ClaimAssignment`. Most fields proxy through to the linked :class:`Claim` record; ``source``, ``valid_from``, ``expiration_date``, and ``metadata`` carry the per-instance state. Like :class:`CertificationAssignmentOut`, ``id`` and ``id`` are the **claim's** identifiers (not the assignment's), so callers can deep-link to the claim record. examples: - category: INGREDIENT_ABSENCE code: NON_GMO expiration_date: '2025-12-31' id: a1b2c3d4-e5f6-7890-abcd-ef1234567890 label: Non-GMO metadata: order_id: '6735' source: BRAND_SELF_DECLARED valid_from: '2024-01-01' properties: metadata: additionalProperties: type: string description: >- Developer-attached key/value data attached to this object. Up to 50 keys; key max 40 chars, value max 500 chars. title: Metadata type: object id: description: >- URL-safe 22-character shortuuid encoding of the row's UUID primary key. Stable across the row's lifetime; suitable for sharing in URLs, log lines, and external SDK clients. Accepted on input as either the shortuuid form or the canonical UUID form (``xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx``). format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Id type: string label: description: Display name of the underlying claim (e.g. ``Non-GMO``). maxLength: 100 title: Label type: string code: description: Stable code of the underlying claim (e.g. ``NON_GMO``). maxLength: 50 title: Code type: string category: $ref: '#/components/schemas/ClaimCategoryEnum' description: >- Category of the underlying claim. See :class:`ClaimCategoryEnum` for the full set of values. source: $ref: '#/components/schemas/ClaimSourceEnum' description: >- How the claim is asserted. ``BRAND_SELF_DECLARED`` means the brand states the claim without third-party verification; ``THIRD_PARTY_VERIFIED`` means an independent body has verified it. valid_from: anyOf: - format: date type: string - type: 'null' description: >- Start of validity for this claim (ISO 8601). ``null`` when no start date was recorded — treat as 'valid since unknown date'. title: Valid From expiration_date: anyOf: - format: date type: string - type: 'null' description: >- End of validity for this claim (ISO 8601). ``null`` for claims with no scheduled expiry. title: Expiration Date required: - id - label - code - category - source title: ClaimAssignmentOut type: object ClaimCategoryEnum: description: |- Mirror of :class:`apps.certifications.models.Claim.Category`. Defines the high-level grouping a claim falls under. Used by :class:`Claim`, :class:`ClaimListOut`, :class:`ClaimAssignmentOut`, and the ``category`` filter on the claims list endpoint. Keep these identifiers identical to the ``TextChoices`` values on the model; Django stores the literal string in the column. enum: - DIETARY - INGREDIENT_ABSENCE - ALLERGEN_FREE - PROCESS - SUSTAINABILITY - OTHER title: ClaimCategoryEnum type: string ClaimSourceEnum: description: |- Mirror of :class:`apps.certifications.models.ClaimAssignment.Source`. Indicates whether the claim is asserted by the brand itself or has been verified by a third party. Defaults to ``BRAND_SELF_DECLARED`` on the create endpoint. Mirror the ``TextChoices`` values on the model exactly. enum: - BRAND_SELF_DECLARED - THIRD_PARTY_VERIFIED title: ClaimSourceEnum type: string securitySchemes: APIKeyHeaderAuth: type: apiKey in: header name: X-API-Key OAuthTokenAuth: type: http scheme: bearer SessionAuth: type: apiKey in: cookie name: sessionid ````