Open Application Programming Interface (API) facility-DGFT
Why in News?
The Directorate General of Foreign Trade (DGFT) introduced an Open Application Programming Interface (API) facility on September 7, 2026, via Trade Notice No. 25/2026-27, to streamline Certificates of Origin (CoO) through the Trade Connect e-Platform.
Key Features and Mechanics
- Direct Integration: Exporters can link their Enterprise Resource Planning (ERP), accounting, or customized business software directly to the DGFT CoO platform.
- Three Functional APIs: The facility provides three distinct tools to automate the workflow:
- Authentication Token API: For handling automated secure logins.
- CoO File API: For submitting fresh applications and receiving digital certificates.
- Certificate Verification API: Used by authorities or partners to verify the authenticity of issued certificates.
- Electronic Tracking Ledger: A live digital ledger keeps a status trail for each application. It tracks metrics like Acknowledgement ID, File Number, and Certificate Number through milestones such as Draft, In Process, Approved, Issued, or Rejected.
- Automatic Rule Validations: The API automatically implements specific validation fields and origin criteria based on the respective trade deal selected by the exporter.
Scope of Trade Agreements Covered
The system fully supports both Preferential CoOs (used to claim lower customs duties under specific trade pacts) and Non-Preferential CoOs (used generally for customs clearance without duty concessions). The framework integrates with major bilateral and regional treaties, including:
The system fully supports both Preferential CoOs (used to claim lower customs duties under specific trade pacts) and Non-Preferential CoOs (used generally for customs clearance without duty concessions). The framework integrates with major bilateral and regional treaties, including:
- Comprehensive Economic Partnership Agreements (CEPA) with Japan, South Korea, UAE, and Oman.
- Trade agreements with Australia (ECTA), EFTA (TEPA), and the UK (CETA).
- Regional trade pacts like ASEAN-India FTA, SAFTA, SAPTA, and the Generalized System of Preferences.
Security Measures
To maintain data integrity and prevent unauthorized access, the DGFT has built-in advanced digital safety protocols:
To maintain data integrity and prevent unauthorized access, the DGFT has built-in advanced digital safety protocols:
- Digital Signatures: All data requests and responses require SHA-256 RSA signatures with 2048-bit X.509 certificates to verify sender identities.
- IP Whitelisting: API access is strictly restricted to specific IP addresses that are registered and whitelisted by the exporter.
- Data Encryption: User passwords are secured through PBKDF2 hashing using a dynamic salt.
- Session Controls: Generated automated login tokens automatically expire after 60 minutes.
