Integrate MARCO with your stack

Compliance verdicts for supplement ingredients across AU (TGA / FSANZ), BR (ANVISA), and CA (Health Canada) — wired straight into your ERP, MRP, or quality system over a stable REST API.

The integrator kit

Everything you need to build against the v1 API, hand-written and supported.

OpenAPI 3.1 spec

canonical

The single source of truth for the v1 surface — endpoints, schemas, auth, error shapes. Drop into Postman, Stoplight, or any code-gen tool.

Postman collection

ready

Pre-built collection with collection-level Bearer auth, variables for base URL + API key, and folders covering every endpoint.

TypeScript SDK

@regcheck360/sdk

Hand-written, ~400 lines, native fetch, strict types. Includes verifyWebhookSignature() for HMAC verification. Node 18+, pure ESM.

Python SDK

regcheck360

Hand-written, ~320 lines, httpx-based, fully typed (py.typed). Context-manager friendly. verify_webhook_signature() included. Python 3.9+.

Webhook events

real-time

Subscribe to regulatory_alert.created, ingredient.status_changed, check.completed, formula.completed. HMAC-signed delivery with 5-attempt retry.

Error reference

public

Every error code the API can return — what it means, common causes, how to fix, with examples. Linked from the v1.1 wrapped envelope's doc_url.

Changelog

versioned

What changed when. Additive-only on v1; breaking changes ship under a future v2 with 180-day notice.

ID + observability

built-in

X-Request-Id echoed end-to-end. X-RateLimit-* headers on every authenticated response. Idempotency-Key support on all POSTs with 24h dedup.

Drop-in connectors

On the roadmap. Talk to us if you need one accelerated.

Katana MRP

soon

Item-master sync · BOM checks

BatchMaster SAP B1

soon

Item Master add-on · gates on save

Zapier

soon

OpenAPI-generated, no-code

Make.com

soon

OpenAPI-generated, no-code

Two minutes to first verdict

  1. 1.Mint a key at /account/api-keys — the secret is shown once.
  2. 2.Try it from any HTTP client:
curl -s https://regcheck360.com/api/v1/check \
  -H "Authorization: Bearer rc360_..." \
  -H "Content-Type: application/json" \
  -d '{"ingredient": "magnesium glycinate", "dose": "300mg", "region": "AU"}'

Or jump to the error reference, OpenAPI spec, or the full narrative spec.

Building something specific? support@regcheck360.com — we'll fast-track scopes, rate-limit bumps, or a drop-in connector.