Environments
The API has two environments. Use the sandbox for development and testing — it is fully isolated from production data.Each environment requires its own API Secret key. See Environments for details on switching between them.
Authentication
Every endpoint requires your Institution API Secret key passed in theX-DigiCert-Secret request header:
Request Format
ForPOST requests, set Content-Type: application/json and include a JSON body. GET requests pass all parameters as query string arguments or path segments.
Response Format
Every response is a JSON object with a consistent envelope structure. Successful response:data field contains the primary payload. On errors, the error.code field contains a machine-readable string for programmatic error handling. See Errors for the full list of error codes.