API & Integrations
How data gets in and out of Normatrack — the public passport endpoint, native connectors, and outbound webhooks.
Public Passport Endpoint
Every published variant has a public, unauthenticated JSON endpoint — the same data source that powers the public passport page and the QR code. Use it to embed or verify passport data in your own site or app.
Get a variant's passport as JSON
GET /api/public/dpp/{variantId}
Response:
{
"variant": {
"id": "cmk3x...",
"name": "Heritage Linen Shirt",
"color": "Mediterranean Blue",
"size": "M",
"materialComposition": "100% European Linen",
"careInstructions": "Cold wash, line dry",
"weight": 0.32,
"productionLocation": "Fes, Morocco",
"digitalId": "a1b2c3d4",
"gtin": null,
"manufacturer": null
},
"product": {
"id": "cmk3w...",
"name": "Heritage Linen Shirt",
"sku": "SHIRT-LINEN-24",
"brand": "Acme Apparel",
"category": "Apparel"
},
"sustainabilityScore": 78,
"environmentalImpact": {
"carbonFootprint": 4.12,
"waterLiters": 1850,
"methodology": "Full lifecycle assessment · ISO 14040/14044 · PEFCR-AF v1.3 · EU PEF EF 3.1"
}
}Fields not yet filled in for a variant (e.g. GTIN) are returned as nullrather than omitted. If the carbon footprint hasn't been calculated yet (insufficient data), carbonFootprint is null rather than a misleading placeholder.
No API key or login is required for this endpoint — it only ever returns data the product owner has published, exactly like scanning the QR code. See the full field reference for every field this response can contain.
Private Document Sharing
For data that isn't ready to be public — pre-release products, supplier audit files — generate a time-limited or one-time private link instead. See Security & Compliance for how access control and revocation work.
Native Integrations
Connect and sync product data directly from Dashboard → Integrations. No custom API code required.
Zapier & Make (Outbound Webhooks)
Rather than polling an API, Normatrack pushes data to you. Create a "Catch Hook" trigger in Zapier or Make, paste that webhook URL into Dashboard → Integrations, and Normatrack posts a JSON payload of product and compliance data to it — on demand or on a schedule you set.
This is one-directional (Normatrack → your automation), so no credentials are shared with third-party automation tools.
Bulk Import & Export
For one-off or recurring bulk data moves rather than a live integration, use CSV/Excel import and export — see the Import Guide.
Need a connector we don't have yet?
Tell us what system you're trying to connect and we'll help you find the fastest path — native integration, webhook, or import.
Contact Support