Developers

Your first successful response

1. Open an API and follow its link to RapidAPI.
2. Subscribe to the free BASIC plan. No card is required for it.
3. Copy your X-RapidAPI-Key from the request panel and set it as RAPIDAPI_KEY.
4. Run the request. This one screens a firm name against FDA Import Alert lists:

curl -X POST "https://fda-import-alert-red-yellow-green-list-screening-api.p.rapidapi.com/screen" \
  -H "content-type: application/json" \
  -H "X-RapidAPI-Key: $RAPIDAPI_KEY" \
  -H "X-RapidAPI-Host: fda-import-alert-red-yellow-green-list-screening-api.p.rapidapi.com" \
  -d '{"firm_name": "Barbosa & Marques S.A.", "country": "BRAZIL"}'

What comes back — a real response from this API, not a mock:

{
  "input": {
    "firm_name": "Barbosa & Marques S.A.",
    "country": "BRAZIL"
  },
  "status": "match",
  "matches": [
    {
      "alert_number": "12-10",
      "alert_name": "Detention Without Physical Examination of Cheese Due to Microbiological Contamination",
      "list_type": "red",
      "matched_name": "Barbosa & Marques S.A.",
      "match_type": "exact",
      "score": 1,
      "country_match": true,
      "product_match": null,
      "firm": {
        "name": "Barbosa & Marques S.A.",
        "address": "Rua Aluizio Esteves, 250 Lourdes , Governado Valadares, Minas Gerais, BRAZIL",
        "country": "BRAZIL",
        "fei_number": null,
        "product_code": "12 Y - - 99",
        "product_description": "Cheese And Cheese Products, Not Elsewhere Mentioned, N.E.C.",
        "notes": "Desc: Queijo Minas Cheese; Notes: DWPE date - 6/25/2004 Queijo Minas Cheese only.",
        "date_published": "2009-09-18"
      }
    }
  ],
  "incomplete_coverage": false,
  "withheld_possible_individual": false,
  "coverage_note": null,
  "records_below_match_threshold": 0,
  "source": {
    "name": "FDA Import Alerts (Red/Yellow/Green Lists)",
    "url": "https://www.accessdata.fda.gov/cms_ia/ialist.html",
    "basis": "live",
    "as_of": "2026-09-16",
    "note": "Served from a D1 cache of real FDA Import Alert data, generation 12, read from FDA in a refresh cycle that began 2026-09-16 (24047 firm entries across 153 alerts). The cache is refreshed by a scheduled job inside FDA's own published visiting-hours window, never on a customer request. A full cycle across every alert spans several runs; a newer cycle may be staging in the background without affecting this response."
  },
  "disclaimer": "… see GET /terms for the full disclosure"
}

Note records_below_match_threshold, incomplete_coverage and withheld_possible_individual: every Aervik response says what it read, what it could not establish, and what it withheld. source carries the upstream and the date it was read. What these APIs refuse to assert covers the whole family of those fields.

Every product page carries its requests in curl, Python and Node.js.

Catalog

9 of 10 APIs have a published OpenAPI 3.1 document. Each is generated from the service's own contract types and checked against real handler output in its test suite, so it describes what the API returns rather than what we meant it to.

Postman

9 of 10 APIs have a Postman collection, linked in the catalog above. Each is generated from the API's OpenAPI document and its product page's examples: every request already sends the X-RapidAPI-Host header, and one shared environment holds your key.

1. Download an API's collection from the catalog and the shared Aervik Labs environment.
2. In Postman, choose Import and select the collection file. Import the environment file the same way.
3. Open the Aervik Labs environment, set RAPIDAPI_KEY to your RapidAPI key, and make it the active environment. The downloaded file has the key empty.
4. Send the first request in the collection.

Authentication

Two headers on every request: X-RapidAPI-Key (your RapidAPI application key) and X-RapidAPI-Host (the API's host, shown on its page and in its spec). RapidAPI handles subscription, billing and rate limits; your card details never reach us.

Errors

The APIs answer in JSON. Where an OpenAPI document is published, it defines the error body and lists every error code the service can return. Authentication, subscription and rate-limit failures come from RapidAPI itself, in RapidAPI's format.

Fields that say what was not checked

These APIs report what they could not read or did not screen, as fields your code can branch on — a withheld list, an unreadable status, a cannot_determine verdict, an incomplete_coverage flag, a per-source basis and date. They are described field by field in each spec. The COI Extraction Honesty Test shows why they exist.

Machine-readable

• /apis.json — every public API, its host and spec, in APIs.json format
• /openapi/<api>.json — the OpenAPI 3.1 document for each API that has one, linked in the catalog above
• /postman/<api>.postman_collection.json — a Postman Collection v2.1 for each API that has one, linked in the catalog above
• github.com/aervik-labs/aervik-api — the same specs, Postman collections and runnable examples in one public repository, regenerated from these sources
• /sources.json — each API's sources, freshness fields, limits and live health
• /llms.txt — a plain index of the site for language models
• Changelog — dated, including corrections, with an Atom feed

There is no uptime guarantee or SLA; the Terms say so rather than imply one.

Licenses

The OpenAPI documents, Postman collections and code examples are available under the MIT License. Research data and test sets are available under CC BY 4.0: reuse them with attribution to Aervik Labs and a link to the research page they come from. Copyright 2026 EAC Ventures, LLC.

These licenses cover the files, not the APIs. Calling an API, and using the data it returns, is governed by its Terms of Service.