API DeCA

API for issuing, correcting, retrieving and downloading Spanish administrative control documents for goods transport. Contact SERTEC PESAGE support to obtain a token. sk_test_ tokens use development and sk_live_ tokens use production, with separate data. IP restrictions are optional.

Each credential can retrieve and download its documents for 24 hours after creation. QR downloads have an independent lifetime. Corrections preserve the original document.

Logical deletion is allowed only within the first 2 hours to correct generation errors. The integration must confirm that the document has neither been handed to the carrier nor used for transport. The file and audit trail are retained, but access is blocked.

You can request an sk_demo_ token without an account or a registered organisation. It lasts 24 hours from issuance and works only from the public IP that requested it. Changing network or IP requires another token. Use fictitious data only. Every PDF page displays NOT VALID beside the logo and a diagonal DEMO watermark. These documents are not valid for transporting goods or for administrative use. The demo adds demo: true, expires_at, qr_url (alias of url) and pdf_url (alias of pdf_download_url). document_locale is the language selected when requesting the token (es by default). Temporary data and PDFs are separate from the real archive and are not encrypted like real documents. The demo accepts bodies up to 32 KiB and ten documents per session. Token issuance allows three per minute and ten per hour from the same IP; document creation allows five per minute and twenty per hour from the same IP. Shared network, region and global load limits may apply earlier. These figures describe the default configuration.

Security Schemes
bearerAuth
Integration token supplied by SERTEC PESAGE support. Send in Authorization: Bearer, exclusively over HTTPS. sk_test_ selects development and sk_live_ selects production. If the token has an authorized IP list, requests must originate from one of those addresses; an empty list permits any IP. Do not send the token in URLs or expose it in client applications. You can request an sk_demo_ token without an account or a registered organisation. It lasts 24 hours from issuance and works only from the public IP that requested it. Changing network or IP requires another token. Use fictitious data only. Every PDF page displays NOT VALID beside the logo and a diagonal DEMO watermark. These documents are not valid for transporting goods or for administrative use.
http
qrSecret
Opaque QR link secret; copy the value returned in url exactly.
apiKey