Una API libre. Sin cuenta para registrar ni para resolver.

Valida formato y control, normaliza y dice si existe y su estado. Para lectores de etiqueta, formularios y agentes: barato y sin contar como resolución.

curl https://parcid.com/api/v1/verify/pid-1-7qc3-z79d-g6rz-8e

const r = await fetch('https://parcid.com/api/v1/verify/' + encodeURIComponent(input));
const v = await r.json();
// { canonical, format, check, registered, status, resolution_url }

Resolución pública: lo que cualquiera puede ver (SPEC §3.4), incluido el perfil de unidad y el anclaje del alta.

curl -H 'Accept: application/json' https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E

const r = await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E');
if (r.status === 404) console.log('valid format, not registered');
const unit = await r.json();
// status, unit_profile, assurance_level, lineage, enrolment.anchor…

Alta: crea el PID y devuelve la llave una sola vez, junto al acta sellada. JSON si solo envías huellas; multipart si subes archivos. Un SSCC entra como enlace.

curl -X POST https://parcid.com/api/v1/parcels \
  -H 'Content-Type: application/json' \
  -d '{
    "capture_class": "api",
    "unit_profile": "parcel",
    "captured_at": "2026-11-18T09:40:58Z",
    "dimensions_mm": { "l": 412, "w": 306, "h": 218, "tolerance_mm": 3 },
    "weight_g": { "value": 3840, "tolerance_g": 5, "scale_class": "consumer" },
    "evidence": [ { "role": "top", "sha256": "sha256:0c7e…", "mime": "image/jpeg", "bytes": 2418833 } ],
    "links": [ { "kind": "sscc", "value": "003412345678901238", "visibility": "public" } ],
    "consent": { "no_personal_data": true, "terms_version": "2026-10" }
  }'

const r = await fetch('https://parcid.com/api/v1/parcels', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    capture_class: 'api',
    unit_profile: 'pallet_load', // parcel | pallet_load | container_load | tote | bag | crate
    captured_at: new Date().toISOString(),
    consent: { no_personal_data: true, terms_version: '2026-10' },
  }),
});
const { pid, owner_key, enrolment_record } = await r.json();
// 201 · store owner_key and enrolment_record now: the key is shown only once

GS1 Digital Link: un SSCC enlazado en público resuelve a sus PID. Cada uno indica claim: «operator» (lo enlazó un operador identificado) o «self_declared» (sin verificar: cualquiera puede enlazar un SSCC público). El PID no es una clave GS1.

curl -H 'Accept: application/json' https://parcid.com/00/003412345678901238

const r = await fetch('https://parcid.com/00/' + sscc, { headers: { Accept: 'application/json' } });
const { parcels } = await r.json(); // [{ pid, status, claim: 'operator' | 'self_declared' }]

Resolución completa para el titular: acta de alta, firma física, evidencias con URL firmadas de corta vida, enlaces privados, avistamientos con detalle.

curl -H "Authorization: Bearer $PIDK" https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E

const r = await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E', {
  headers: { Authorization: 'Bearer ' + ownerKey }, // never in the URL
});
const full = await r.json(); // record, physical signature, evidence, private links

Añade referencias externas (seguimiento, SSCC, pedido, contenedor BIC, precinto, GRAI, etiqueta de equipaje) con visibilidad privada o pública.

curl -X POST https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/links \
  -H "Authorization: Bearer $PIDK" -H 'Content-Type: application/json' \
  -d '{ "links": [ { "kind": "sscc", "value": "003412345678901238", "visibility": "public" } ] }'
# kinds: tracking, sscc, order, bic, seal, grai, bag_tag…

await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/links', {
  method: 'POST',
  headers: { Authorization: 'Bearer ' + ownerKey, 'Content-Type': 'application/json' },
  body: JSON.stringify({ links: [{ kind: 'bic', value: 'CSQU3054383', visibility: 'private' }] }),
});

Declara apertura, consolidación, división o reembalaje y crea el hijo.

curl -X POST https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/lineage \
  -H "Authorization: Bearer $PIDK" -H 'Content-Type: application/json' \
  -d '{ "operation": "repack", "consent": { "no_personal_data": true, "terms_version": "2026-10" } }'
# consolidate: "parents": [ { "pid": "PID-…", "owner_key": "pidk_…" } ]

const r = await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/lineage', {
  method: 'POST',
  headers: { Authorization: 'Bearer ' + parentKey, 'Content-Type': 'application/json' },
  body: JSON.stringify({ operation: 'repack', consent: { no_personal_data: true, terms_version: '2026-10' } }),
});
const { children } = await r.json(); // each child is born with its own key

Cambia el estado a retired (entregado y cerrado) o lost.

curl -X POST https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/status \
  -H "Authorization: Bearer $PIDK" -H 'Content-Type: application/json' \
  -d '{ "status": "retired", "reason_code": "delivered" }'

await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/status', {
  method: 'POST',
  headers: { Authorization: 'Bearer ' + ownerKey, 'Content-Type': 'application/json' },
  body: JSON.stringify({ status: 'lost' }), // 'retired' | 'lost'
});

Emite una llave nueva y anula la anterior.

curl -X POST -H "Authorization: Bearer $PIDK" https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/rotate-key

const r = await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/rotate-key', {
  method: 'POST', headers: { Authorization: 'Bearer ' + ownerKey },
});
const { owner_key } = await r.json(); // the previous key is revoked

Avistamiento con comparación 1:1 (SPEC §8). Lo hace un operador: su clave pidd_ con el servicio contratado va en Authorization y la llave de la unidad en X-Parcid-Owner-Key.

curl -X POST https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/sightings \
  -H "Authorization: Bearer $PIDD" -H "X-Parcid-Owner-Key: $PIDK" -F capture_class=station \
  -F 'evidence[top]=@top.jpg' -F 'evidence[perspective]=@perspective.jpg'
# $PIDD: operator key with the contracted service · without it: 402 {"error":"paid_service"}

const form = new FormData();
form.append('capture_class', 'mobile_sdk');
form.append('evidence[top]', file);
const r = await fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/sightings', {
  method: 'POST',
  headers: { Authorization: 'Bearer ' + operatorKey, 'X-Parcid-Owner-Key': ownerKey },
  body: form,
});
// match.decision: 'match' | 'review' | 'no_match', with an explanation

Reserva de bloques de PID para estaciones sin red, firmada por el dispositivo. Caducan a los 90 días y nunca se reemiten.

curl -X POST https://parcid.com/api/v1/reservations -H 'Content-Type: application/json' -d '{
  "device": { "public_key": "ed25519:…" },
  "count": 500, "requested_at": "2026-11-18T09:40:00Z", "nonce": "r4nd0m-n0nce",
  "device_signature": "…"
}'
# device_signature: Ed25519 over sha256(JCS({schema:"parcid.reservation-request/1", public_key, count, requested_at, nonce}))

const r = await fetch('https://parcid.com/api/v1/reservations', {
  method: 'POST', headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify(signedRequest),
});
const { pids, expires_at, reservation_record } = await r.json();
// offline stations enrol later with POST /parcels { "pid": …, … } signed by the same device

Prueba de inclusión de cada acta de la unidad: ruta Merkle RFC 6962, declaración diaria firmada y prueba OpenTimestamps.

curl https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/proof
# verify it without us: node cli.mjs proof PID-1-7QC3-Z79D-G6RZ-8E

import { verifyProof } from 'https://parcid.com/verify/parcid-verify.js';
const [proof, keys] = await Promise.all([
  fetch('https://parcid.com/api/v1/parcels/PID-1-7QC3-Z79D-G6RZ-8E/proof').then((r) => r.json()),
  fetch('https://parcid.com/.well-known/parcid').then((r) => r.json()),
]);
const res = await verifyProof(proof, keys); // { ok, fully_anchored, records: [...] }

Cadena de declaraciones diarias: raíz Merkle, firma Ed25519, encadenado y estado en Bitcoin.

curl "https://parcid.com/api/v1/anchors?from=2026-11-01&limit=30"

const { anchors, next_from } = await (await fetch('https://parcid.com/api/v1/anchors?from=2026-11-01')).json();
// each: day, statement (merkle_root, prev_statement_hash…), statement_hash, signature, bitcoin.status

Declaración de un día y su prueba OpenTimestamps; con .ots, el fichero binario para ots verify.

curl https://parcid.com/api/v1/anchors/2026-11-18
curl -o 2026-11-18.ots https://parcid.com/api/v1/anchors/2026-11-18.ots
# ots verify 2026-11-18.ots, or: node cli.mjs ots 2026-11-18.ots --bitcoin

const a = await (await fetch('https://parcid.com/api/v1/anchors/2026-11-18')).json();
// a.statement, a.statement_hash, a.signature, a.bitcoin, a.opentimestamps[].ots_base64

Índice de exportaciones diarias: día, URL, tamaño, huella, unidades y manifiesto firmado. CC0.

curl https://parcid.com/api/v1/export
# { license: "CC0-1.0", exports: [ { day, url, bytes, sha256, units, manifest, signature } ] }

const { exports } = await (await fetch('https://parcid.com/api/v1/export')).json();
const latest = exports.at(-1); // daily, CC0, units identified by a per-unit salted tag (pid_tag + pid_salt)

Exportación completa del día en JSON Lines + gzip: unidades (por una huella con sal por unidad, pid_tag + pid_salt; nunca el PID en claro), actas del libro, anclas y manifiesto firmado.

curl -O https://parcid.com/api/v1/export/parcid-export-20261118.jsonl.gz
node cli.mjs export parcid-export-20261118.jsonl.gz --pid PID-1-7QC3-Z79D-G6RZ-8E

const gz = await fetch(latest.url);
const text = await new Response(gz.body.pipeThrough(new DecompressionStream('gzip'))).text();
const res = await verifyExport(text.split('\n')); // from parcid-verify.js

Metadatos del registro: versión, claves públicas (kid), formato del ID, transparencia, exportación y límites.

curl https://parcid.com/.well-known/parcid

const meta = await (await fetch('https://parcid.com/.well-known/parcid')).json();
// spec, keys[] (kid, public_key), id_format, transparency, export, limits

Cifras agregadas: unidades por perfil, nivel y estado, actas por tipo, última ancla y exportación, peticiones de 24 h.

curl https://parcid.com/api/v1/stats

const s = await (await fetch('https://parcid.com/api/v1/stats')).json();
// units.by_profile, units.by_assurance_level, records.by_type, anchors.latest, export, api_24h

Salud del servicio: ok, degraded o down (503), con las comprobaciones y las tareas diarias.

curl https://parcid.com/api/v1/health

const h = await (await fetch('https://parcid.com/api/v1/health')).json();
// status: 'ok' | 'degraded' | 'down' (503)

Contador de visitas de esta web: ruta, procedencia e idioma. Sin cookies ni identificadores; la IP no se guarda. Responde 204.

curl -X POST https://parcid.com/api/v1/beacon -H 'Content-Type: application/json' \
  -d '{ "p": "/como-funciona/", "r": "", "l": "es" }'
# 204 · no cookies, no identifiers, IP never stored

navigator.sendBeacon('/api/v1/beacon', new Blob([JSON.stringify({
  p: location.pathname, r: document.referrer, l: 'es',
})], { type: 'application/json' })); // only the path, referrer host and language are counted