WaveBL Certificate of Authenticity API
Undocumented HTTPS API behind WaveBL's public Certificate of Authenticity tool — the free service at coa.wavebl.com that lets any party verify that a bill of lading or trade document was issued and transferred on the WaveBL network. Its existence, base path and two operations are established from WaveBL's own production build: the Angular bundle served at coa.wavebl.com constructs an HTTP client with baseURL "coadocuments" and calls the relative paths "search" and "verify". The surface is an AWS API Gateway fronted by CloudFront — an anonymous GET or OPTIONS to either path returns HTTP 403 {"message":"Missing Authentication Token"} with x-amzn-errortype MissingAuthenticationTokenException and an x-amz-apigw-id header, which is the API Gateway answer for a method not defined on that resource, so only the POST methods the app itself uses are exposed. WaveBL publishes no reference, no OpenAPI and no authentication documentation for it, so no parameters, schemas, error shapes or auth scheme are recorded here. Listed as a measured, undocumented surface.