POSTFSSAI License Verification

Verify FSSAI food license details and status in real time.

POST/tools/kyc/fetch-fssai

Read-only: Changes nothing; only returns data.
₹3.24 + GST / verification: Charged per successful call; failed calls are free.

Warning

The UAT environment is not available for this API — requests to https://staging.eko.in/ekoapi/v3 return an error response. Test it in Production.

Validates a Food Safety and Standards Authority of India (FSSAI) license number and returns the registered food business operator (FBO) details — name, address, license category, status, and expiry date. Use for food marketplace onboarding, delivery platform compliance, and food safety regulatory audits.

Request

Body parameters

Field	Type	Required	Description
`initiator_id`	string	required	Registered mobile number of the API user (see Platform Credentials).e.g. 9962981729
`client_ref_id`	string	optional	Unique reference ID per API call, generated by your system (10–20 characters; 10 recommended). The SDKs generate one for every non-GET call when you don't.e.g. 2026010100123456789
`fssai`	string	required	FSSAI license number of the food business operator (FBO) to verify. Typically 14 digits.e.g. 11521998000045

initiator_idstringRequired

Registered mobile number of the API user (see Platform Credentials).

example: 9962981729

client_ref_idstringoptional

Unique reference ID per API call, generated by your system (10–20 characters; 10 recommended). The SDKs generate one for every non-GET call when you don't.

example: 2026010100123456789

fssaistringRequired

FSSAI license number of the food business operator (FBO) to verify. Typically 14 digits.

example: 11521998000045

These headers authenticate and sign every request. See How Auth Works for details.

Field	Type	Required	Description
`developer_key`	string	required	Static API key issued to your account after KYC.
`secret-key`	string	required	Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).
`secret-key-timestamp`	string	required	Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.
`content-type`	string	required	application/jsone.g. application/json

developer_keystringRequired

Static API key issued to your account after KYC.

secret-keystringRequired

Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).

secret-key-timestampstringRequired

Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.

content-typestringRequired

application/json

example: application/json

Responses

statusnumber
Primary success indicator (0 = success).
messagestring
Human-readable response / error message.
response_status_idnumber
UI display hint only (-1/0 success, 1 failure, 2 initiated, 3 refund initiated, 4 refunded). Never branch on it — use `status` (and `tx_status` for financial APIs), or `response_type_id` where documented.
response_type_idnumber
A unique id for every possible response shape (success or error) — useful for client logic branching and analytics.
dataobject
API-specific response payload.
- fssai_numberstring
  The FSSAI license number that was queried.
- license_statusstring
  Current status of the FSSAI license — Active, Expired, Suspended, or Cancelled.
- license_categorystring
  Category of the FSSAI license — Registration, State License, or Central License — reflecting the scale of the food business.
- business_namestring
  Registered name of the food business operator (FBO) as on the FSSAI license.
- addressstring
  Registered business address of the FBO as on the FSSAI license.
- statestring
  Indian state in which the food business is registered.
- pincodestring
  6-digit PIN code of the registered business address.
- expiry_datestring
  License validity expiry date in YYYY-MM-DD format. Use to flag expired or soon-to-expire licenses.

POSTFSSAI License Verification

Request

Body parameters

Responses

Next steps

Related