DGFT — IEC code verification

note

Status: Fixture Mode — Endpoint, schema, auth, and SDKs are production-grade. Responses are deterministic samples drawn from real regulator publications. Activates to live within 5–15 business days of order — no integration changes required.

What it does

Every Indian importer/exporter holds a DGFT-issued IEC. Our API verifies IEC validity, retrieves the registered company's authorised signatories, branches, and any restrictions/cancellations — useful for buyer KYB, freight-forwarder onboarding, and EXIM-compliance audits.

Base URL

https://dgft.sahayakonline.co.in/v1/

Endpoints

Method	Path	Description
GET	/health	Liveness probe
GET	/v1/dgft/iec/{iec_code}	Verify and retrieve IEC details
GET	/v1/dgft/iec/{iec_code}/branches	Registered branch list
GET	/v1/dgft/iec/{iec_code}/signatories	Authorised signatories

Sample request

cURL

curl -sS https://dgft.sahayakonline.co.in/v1/dgft/iec/0312345678 \
  -H "Authorization: Bearer $SAHAYAK_KEY" \
  -H "Accept: application/json"

Python

import os, requests
resp = requests.get(
    "https://dgft.sahayakonline.co.in/v1/dgft/iec/0312345678",
    headers={"Authorization": f"Bearer {os.environ['SAHAYAK_KEY']}", "Accept": "application/json"},
    timeout=10,
)
resp.raise_for_status()
print(resp.json())

Node.js

const fetch = (await import('node-fetch')).default;
const resp = await fetch('https://dgft.sahayakonline.co.in/v1/dgft/iec/0312345678', {
  headers: {
    'Authorization': `Bearer ${process.env.SAHAYAK_KEY}`,
    'Accept': 'application/json',
  },
});
console.log(await resp.json());

Sample response

{
  "spec_ref": "spec_dgft_iec_v1",
  "endpoint": "/v1/dgft/iec/0312345678",
  "method": "GET",
  "results": [
    {
      "iec": "0312345678",
      "company": "Sample Exports Pvt Ltd",
      "issued_on": "2018-04-12",
      "status": "active",
      "address": "12-B, Industrial Estate, Mumbai 400069"
    }
  ],
  "meta": { "fixture_mode": true, "note": "Activates to live data within 5–15 business days of order." }
}

Error codes

Code	Meaning	Recommended action
400	Malformed request (missing required param, invalid format)	Fix request shape. Response body includes error.field pinpointing the issue.
401	Missing or invalid Authorization header	Verify key prefix matches your tier and that the header is Authorization: Bearer ….
403	Key valid but not entitled to this endpoint	Sandbox keys cannot call live-tier endpoints. Upgrade or request entitlement.
404	Resource not found	Check identifier format. Some endpoints return 200 with empty results[] instead of 404 — verify the endpoint convention.
429	Rate limit exceeded	Honor Retry-After header. Sandbox 30 r/m, Starter 300 r/m, Growth 1500 r/m.
503	Upstream regulator unreachable after retries	Live-tier only. Sahayak retries 3× with backoff before surfacing. Implement circuit-breaker on caller side.

Rate limits

Tier	Rate limit	Monthly cap
Sandbox	30 r/min	1,000 live calls (shared across 3 LIVE endpoints)
Starter	300 r/min	10,000 live calls
Growth	1,500 r/min	100,000 live calls
Scale	custom	500,000+

SLA reference

See Status & SLA for uptime targets, latency targets, and incident communication. Live activation pulls from the DGFT IEC database with caching.