Company

Keyless live company-verify showcase (allowlisted, zero-auth)

KEYLESS, PUBLIC live company verification for a small allowlist of well-known Norwegian companies — no API key, no signup. Runs the SAME deterministic verdict chain (pass / fail / unknown; warn reserved in the vocabulary) as the authenticated GET /api/v1/company/{org}/verify (getCompanyContext -> Brønnøysund -> computeVerification), MINUS the API-key / scope / per-key rate-limit gates, and returns REAL Brønnøysund data with an HONEST _meta (is_sandbox: false, data_source: Brønnøysund Enhetsregisteret, no sandbox_notice). READ-side only — nothing here submits, files, or acts on any government system. Gated to a closed 3-org allowlist (Equinor 923609016, Telenor 982463718, Norsk Hydro 914778271); any other org — including a valid mod-11 number or the sandbox fixture 999999999 — returns 403 SHOWCASE_ORG_NOT_PERMITTED with an invitation to get a free API key and look up any company. Per-IP rate-limited (shares the public-sandbox 100 requests/hour bucket). Fresh successful responses are edge-cacheable (Cache-Control: public, s-maxage=3600, stale-while-revalidate=86400); a stale-cache fallback (BRREG down, cached row served) is returned no-store so the CDN never serves it past the loader 7-day hard cap. PROVENANCE EXEMPT — a keyless marketing surface with no consumer identity to anchor a forensic receipt: no _meta.response_hash, no provenance_log row.

get/api/v1/showcase/company/{org}/verify

Request

  • Base URL: https://www.apier.no
  • URL: https://www.apier.no/api/v1/showcase/company/{org}/verify
  • Auth: none required

Path parameters

orgstring required

9-digit Norwegian organisation number. Only the three allowlisted showcase orgs are served (Equinor 923609016, Telenor 982463718, Norsk Hydro 914778271); a non-9-digit value returns 400 VALIDATION_FAILED, and any other valid org returns 403 SHOWCASE_ORG_NOT_PERMITTED.

Response

Live verification verdict computed from real Brønnøysund data. Branch on data.verification_status; inspect data.signals for the per-signal booleans. _meta.is_sandbox is the literal false and _meta.data_source is Brønnøysund Enhetsregisteret — this is honest, non-sandbox data. data.signing_authority_summary is role-based only (never a personal name).

successtrue required

Example response

{
  "data": {
    "org_number": "999999999",
    "verification_status": "pass",
    "summary_en": "The company is actively registered in the Central Coordinating Register for Legal Entities (Enhetsregisteret) and has a registered signing authority (signaturrett), procuration (prokura) or owner (innehaver)."
  },
  "_meta": {
    "rulebook_version": "1.0.0",
    "schema_version": "1.0.0"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.