Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: HLA-Verify Beta Signup API
version: 1.0.0
description: 'Deterministic validation of HLA nomenclature and donor-recipient match arithmetic against IPD-IMGT/HLA 3.66.0. No LLM; nothing stored. What to send: allele names, typing strings, GL strings and report text about HLA typing. What never to send: patient identifiers of any kind (names, medical record numbers, dates of birth, accession or case identifiers, other patient details). The service neither needs nor wants them, request bodies are processed in memory and never stored, and de-identifying before sending is the caller''s responsibility. This is a nomenclature and reference-release checker: not a diagnostic aid, not clinical decision support, and it does not recommend a donor. Limits are a daily call quota plus a per-call batch cap, both per tier: free 100 calls/day per IP and 250 typings per /v1/normalize call, free_key 1,000/250 (the instant self-serve key), starter 500/250, lab 10,000/5,000, scale 1,000,000/5,000, enterprise uncapped/5,000, academic 10,000/5,000 (hand-issued to accredited institutions, never sold); ''pro'' is the legacy name for ''lab''. Quotas reset at UTC midnight and every billable response carries x-hla-verify-daily-limit, -daily-remaining, -daily-reset and -max-typings. /healthz, /docs, /openapi.json, /pricing, /v1/checkout, /v1/beta-signup, /v1/research-access, /v1/keys, /v1/report and /v1/usage are not billable. Per-key usage reporting: GET /v1/usage returns the caller''s own calls and units for today/7d/30d, by endpoint and by status, plus the tier''s daily quota; cached 60s per key; 401 without a key. Free for anyone: anonymous access stays open, and anyone can get a free API key instantly (1,000 calls/day, 250 typings per call) at https://hlaverify.com/research or with POST /v1/research-access. Verified labs that need more can have the Lab tier (10,000 calls/day) by request. Nothing is for sale. Enterprise and self-hosting: hello@hlaverify.com.'
contact:
email: hello@hlaverify.com
url: https://hlaverify.com
servers:
- url: https://api.hlaverify.com
- url: https://hlaverify.com
security:
- {}
- ApiKey: []
tags:
- name: Beta Signup
paths:
/v1/beta-signup:
post:
summary: Join the beta notification list
description: Records one address per beta list entry; re-submitting the same address returns already_recorded rather than failing. Stores the address, the optional fields, a timestamp and CF-IPCountry — no IP address. The record is not an API key and cannot be used as one.
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- email
properties:
email:
type: string
maxLength: 254
example: you@lab.example
org:
type: string
maxLength: 120
use_case:
type: string
maxLength: 500
source:
type: string
maxLength: 120
description: 'Free-text hint: site, mcp, docs.'
responses:
'200':
description: recorded or already_recorded
content:
application/json:
schema:
type: object
required:
- ok
- status
- message
- release
properties:
ok:
type: boolean
status:
type: string
enum:
- recorded
- already_recorded
message:
type: string
release:
type: string
'422':
description: invalid email or an oversized field
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'429':
description: rate limited (60 req/min per IP; /v1/beta-signup does not consume daily quota)
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
tags:
- Beta Signup
operationId: postV1BetaSignup
x-operation-id-source: derived
components:
schemas:
Error:
type: object
properties:
detail:
type: string
securitySchemes:
ApiKey:
type: apiKey
in: header
name: X-API-Key