DGFT opens API access for Certificates of Origin on Trade Connect platform

NEW DELHI: The Directorate General of Foreign Trade (DGFT), under the Ministry of Commerce and Industry, has introduced an Open Application Programming Interface (API) facility for the issuance and verification of Certificates of Origin (CoO) through the Trade Connect e-Platform.

The facility will allow eligible exporters to connect their Enterprise Resource Planning (ERP), accounting or other business software directly with the DGFT’s CoO system, reducing the need to enter the same information separately on the government platform.

The new integration is designed to eliminate repetitive data entry, reduce errors and speed up the Certificate of Origin application process.

APIs cover application and verification

The Open API facility covers both Preferential and Non-Preferential Certificates of Origin.

Preferential CoOs are issued under Free Trade Agreements (FTAs), Regional Trade Agreements (RTAs) and Preferential Trade Agreements (PTAs), enabling exporters to claim applicable tariff concessions in importing countries.

Non-Preferential CoOs are used for customs clearance, compliance, trade remedies and other trade-related purposes without providing tariff benefits.

Exporters can obtain API credentials through the API Management section of the CoO Portal and register the IP addresses from which their systems will connect.

DGFT has made three APIs available:

• Authentication Token API — enables secure authentication.
• CoO File API — enables submission of applications and receipt of certificates.
• Certificate Verification API — enables verification of issued certificates.

Digital transaction ledger

The system maintains a transaction ledger for each application, allowing exporters to electronically track its status through stages including Draft, In Process, Approved, Certificate Issued and Rejected.

The ledger also records the acknowledgement ID, file number, file date and certificate number, providing exporters with an electronic trail of their applications.

Security built into API framework

DGFT said the Open API framework incorporates multiple safeguards for secure information exchange.

Requests and responses are digitally signed using SHA-256 RSA digital signatures with 2048-bit X.509 certificates to provide data integrity, sender authentication and non-repudiation.

Passwords are protected through PBKDF2 hashing with a dynamic salt, while access is restricted to IP addresses whitelisted by exporters. Each access token remains valid for 60 minutes.

The system also automatically applies relevant fields, origin criteria and validation rules based on the trade agreement or certification scheme selected by the exporter.

Covers major trade agreements

The API framework covers major trade agreements and certification schemes, including the India-Japan CEPA, India-Korea CEPA, SAFTA, SAPTA, ASEAN-India FTA, India-Singapore CECA, India-Malaysia CECA, India-Chile PTA, India-Mercosur PTA, India-UAE CEPA, India-Australia ECTA, India-Oman CEPA, India-EFTA TEPA, India-UK CETA, the Generalized System of Preferences and the Non-Preferential CoO Scheme.

DGFT has made the registration, authentication and technical integration process available through the Certificate of Origin section of the Trade Connect e-Platform.

A step-by-step help manual has also been annexed to Trade Notice No. 25/2026-27, dated September 7, 2026.

Exporters, Export Promotion Councils, designated CoO issuing agencies and trade bodies can approach the DGFT Helpdesk for queries, suggestions and feedback concerning the electronic CoO module.