recallsapi-com Receipts API

openapi: 3.2.0
info:
  title: recallsapi.com Receipts API
  version: 0.1.0
  summary: 'Recall records from 9 US agencies (CPSC, FDA, NHTSA, US Coast Guard, FAA and more), plus 5 early-warning sources, in one API, with product matching and catalog monitoring. USDA FSIS: 2013 to October 6, 2026 loaded; daily updates coming soon.'
  description: Every record links to its agency source with an as-of date. Matches carry a confidence level and the reasons behind it; a match is information to review, not a legal or safety determination. Sold by PrimeZen LLC.
  contact:
    name: recallsapi.com support
    email: hello@recallsapi.com
    url: https://recallsapi.com
  x-guidance: 'recallsapi.com answers whether a product or vehicle is under a US recall, from the records of 9 US agencies (CPSC, FDA, NHTSA, US Coast Guard, FAA and more). Every record carries its agency source and an as-of date.


    Start with GET /v1/check: give any of upc (UPC, EAN or GTIN barcode), model, ndc, lot, brand and name. Each match has a confidence (exact, strong or possible) and the reasons for it. A match is information to review, not a legal or safety determination, and no match does not mean a product is safe.


    GET /v1/vehicles takes vin, or make, model and year, and returns NHTSA campaigns with live NHTSA complaint counts. GET /v1/recalls searches records with q, category, source, since and until, newest first; page with next_cursor.


    Pay per call with x402, no account needed: call a paid route without an API key and it answers 402 with a PAYMENT-REQUIRED header (x402 v2, scheme exact, USDC on Base). Sign the payment and repeat the call with the PAYMENT-SIGNATURE header. Prices per call: GET /v1/check $0.02, GET /v1/recalls $0.01, GET /v1/vehicles $0.01. A call that does not succeed (any answer that is not 2xx) is not charged.


    Prepaid credit: POST /v1/credits/topup?amount=1, 5 or 20 (USD; the $1 top-up when amount is left out) is one x402 payment that returns credit_token, shown once. Send it as the X-Credit-Token header on the paid routes to draw each call from the balance with no further on-chain payment; read the balance at GET /v1/credits (free). Credit is not refundable and does not expire.


    With an API key the routes work within the plan''s limits and no payment is asked: get a free key with POST /v1/keys and an email address (the key is sent to that inbox), then send Authorization: Bearer <key> or X-API-Key: <key>. Catalog monitoring (/v1/catalogs) and the MCP server tools (POST /mcp) need a key. GET /v1/health shows each source''s freshness and is free.


    Docs: recallsapi.com/docs/agents. Contact: hello@recallsapi.com.'
  termsOfService: https://recallsapi.com/terms
servers:
- url: https://api.recallsapi.com
security:
- bearer: []
- apiKey: []
tags:
- name: Receipts
paths:
  /v1/receipts/{id}:
    get:
      operationId: getReceipt
      summary: A stored check receipt, no key needed
      description: 'Returns the receipt exactly as it was issued with `receipt=1` on /v1/check or `receipt: true` on the MCP check_product tool. Free and unmetered. Receipts are kept for 400 days.'
      security: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          pattern: ^rcpt_[A-Za-z0-9]{24}$
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Receipt'
        '400':
          description: The id is not in the receipt format
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: No receipt with that id
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      tags:
      - Receipts
  /v1/receipts/verify:
    post:
      operationId: verifyReceipt
      summary: Verify a receipt signature, no key needed
      description: Recomputes the canonical JSON of the receipt without its signature field and verifies the Ed25519 signature with the public key named by its kid. Free and unmetered; body up to 100 KB. The same check can be done offline with the keys file.
      security: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - receipt
              properties:
                receipt:
                  $ref: '#/components/schemas/Receipt'
      responses:
        '200':
          description: valid true or false, with a reason when false
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Verification'
        '400':
          description: No receipt in the body, or the body is over 100 KB
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '413':
          description: Body over 100 KB
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      tags:
      - Receipts
components:
  schemas:
    Receipt:
      type: object
      description: 'A dated, verifiable record of what recallsapi.com held when a product was checked: the normalized input, match counts, the state of every source and a plain statement, signed with Ed25519. It is not a safety certification and absence of a match does not mean a product is safe. Stored for 400 days.'
      properties:
        id:
          type: string
          pattern: ^rcpt_[A-Za-z0-9]{24}$
        issued_at:
          type: string
          format: date-time
        issuer:
          type: string
          const: recallsapi.com (PrimeZen LLC)
        input:
          type: object
          description: 'The normalized input: the resolved block of the check'
        result:
          type: object
          properties:
            matches:
              type: object
              properties:
                exact:
                  type: integer
                strong:
                  type: integer
                possible:
                  type: integer
            signals:
              type: integer
              description: Early-warning signals in the answer
            adverse_events:
              type:
              - boolean
              - 'null'
              description: true when FDA MAUDE held reports for the brand and model; false when both were given and the live lookup answered nothing; null when the check did not look
        sources:
          type: array
          items:
            type: object
            properties:
              source:
                type: string
              status:
                type: string
                enum:
                - ok
                - stale
                - pending
                - coming_soon
              last_success:
                type:
                - string
                - 'null'
                format: date-time
              records:
                type: integer
              newest_record:
                type:
                - string
                - 'null'
          description: Every recall source, as /v1/health reported it at issue time
        signal_sources:
          type: array
          items:
            type: object
            properties:
              source:
                type: string
              status:
                type: string
                enum:
                - ok
                - stale
                - pending
                - coming_soon
              last_success:
                type:
                - string
                - 'null'
                format: date-time
              records:
                type: integer
              newest_record:
                type:
                - string
                - 'null'
          description: Every early-warning signal source at issue time
        statement:
          type: string
          description: What was or was not found, as of issued_at, and what the receipt is not
        signature:
          type:
          - object
          - 'null'
          description: null while signing is not enabled (then note says so)
          properties:
            alg:
              type: string
              const: Ed25519
            kid:
              type: string
              description: First 8 hex characters of the SHA-256 of the SPKI public key; look it up in /.well-known/recallsapi-keys.json
            value:
              type: string
              description: base64url Ed25519 signature over the canonical JSON (object keys sorted recursively, arrays in order, no whitespace) of the receipt without the signature field
        note:
          type: string
          description: Only when signature is null
        verify_url:
          type: string
          format: uri
          description: GET returns the stored receipt without a key
    Verification:
      type: object
      properties:
        valid:
          type: boolean
        kid:
          type:
          - string
          - 'null'
        issued_at:
          type:
          - string
          - 'null'
        reason:
          type: string
          description: Only when valid is false
    Error:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
            message:
              type: string
            details: {}
  securitySchemes:
    bearer:
      type: http
      scheme: bearer
      description: API key from POST /v1/keys
    apiKey:
      type: apiKey
      in: header
      name: X-API-Key
      description: 'The same API key from POST /v1/keys, sent as the X-API-Key header instead of Authorization: Bearer'
    credit:
      type: apiKey
      in: header
      name: X-Credit-Token
      description: x402 prepaid credit token from POST /v1/credits/topup (shown once). Pays /v1/check, /v1/recalls and /v1/vehicles from its balance, only while x402 payments are switched on.