What is gocertius-suite-api?

An integration guide for the GoCertius and EAD Enterprise Suite REST API, which lets software communicate with these services over the web. It explains authentication, case files, evidence, dossiers, notifications, chats, and electronic signatures.

Use it when building or debugging integrations that capture evidence, certify dossiers, send notifications, manage chats, or handle signatures.

It removes guesswork about which API calls to make, in what order, and which deployment supports each product.

How g-digital-by-Garrigues/EAD_Enterprise_Suite

Reuse

Borrowing it

Nothing to install: this file belongs to g-digital-by-Garrigues/EAD_Enterprise_Suite_MCP. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/g-digital-by-Garrigues/EAD_Enterprise_Suite_MCP/main/.claude/skills/gocertius-suite-api/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/g-digital-by-Garrigues/EAD_Enterprise_Suite_MCP

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/g-digital-by-garrigues/ead_enterprise_suite_mcp/gocertius-suite-api/github.svg)](https://agentmods.dev/skills/g-digital-by-garrigues/ead_enterprise_suite_mcp/gocertius-suite-api)

Your own site

<a href="https://agentmods.dev/skills/g-digital-by-garrigues/ead_enterprise_suite_mcp/gocertius-suite-api"><img src="https://agentmods.dev/badge/skills/g-digital-by-garrigues/ead_enterprise_suite_mcp/gocertius-suite-api/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/g-digital-by-garrigues/ead_enterprise_suite_mcp/gocertius-suite-api"><img src="https://agentmods.dev/badge/skills/g-digital-by-garrigues/ead_enterprise_suite_mcp/gocertius-suite-api.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 143 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 14,034 The whole file, excluding the scripts and references it only reads on demand.

Security scan C 3 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 100% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00143	$0.14034
Opus 5	$0.00072	$0.07017
Sonnet 5	$0.00029	$0.02807
Haiku 4.5	$0.00014	$0.01403

Measured 4d ago against content hash 83820468f5bb, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade C, and why

gocertius-suite-api scanned grade C with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Sends data to an external URLmediumData exfiltration

A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.

curl -s -X POST "$BASE/session-with-legal-texts" -H "Content-Type: application/json" -d '{

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

> restrictive permissions (`chmod 600`) or set it as an environment variable, and point the

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s -X POST "$BASE/user-keys/session" \

Origin

This is a copy

100% identical to gocertius-suite-api — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.claude/skills/gocertius-suite-api/SKILL.md · 625 lines

How it starts

The opening of the file, as written. The whole thing — 625 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GoCertius / EAD Enterprise Suite — API Integration Guide

Skill version 1.0.1 — updated 2026-09-04. See the Changelog at the end. Authentication facts about the REST API are stated as of 2026-07-18; the user-key endpoints are being promoted to production (see §1). The 2026-09-04 revision only adds the MCP-server/n8n note in §1 — no REST behaviour changed.

GoCertius and EAD Enterprise Suite are the same API behind two deployments. They share one OpenAPI contract and differ only in base URL and which products each deployment has enabled. Everything in this guide applies to both, but check the product table below before calling an endpoint — a resource that isn't enabled on your deployment won't work.

Deployment	Base URL	Interactive docs
GoCertius	`https://api-gocertius.gocertius.io`	`https://api-gocertius.gocertius.io/apidoc/`
EAD Enterprise Suite	`https://api-eadcustody.eadtrust.gocertius.io`	(same OpenAPI, EAD host)

Products enabled per deployment

Product	GoCertius	EAD Enterprise Suite
Evidence capture	✅	✅
Dossiers (evidence certificates)	✅	✅
Certified notifications	✅	✅
Chats (certified conversations)	✅	❌
E-signature	❌ (planned)	✅

Both deployments do evidence + dossiers + notifications. Chats are GoCertius-only. E-signature is EAD-Enterprise-only — it is not yet in GoCertius (expected in a few months). The dossier templates also differ (see §4): GoCertius ships one standard template; EAD Enterprise exposes editable templates.

Fetch the live OpenAPI JSON from the /apidoc/ Swagger UI on your base host to resolve exact field-level schemas. This guide gives you the flows, options, and traps that the raw spec does not make obvious.

Provenance: items marked ✅ Tested were executed against the live API on 2026-07-02…18 — auth (incl. the legal-texts gate, the user-key exchange, and GET /profile for identity), the full evidence flow, pagination, and the chat + chat-certificate flow against GoCertius production; the full dossier / evidence-certificate lifecycle (templates, fields, password, preview, certify, download, visibility, delete, express), e-signature (INTERPOSITION) build + signed-document / completion-certificate download, and certified notification (email + WhatsApp) + delivery-certificate flows against EAD Enterprise Suite. The two deployments share one contract, so contract-level flows apply to both — but respect the per-deployment product table above. Anything without a ✅ is spec-derived.

Read the full file on GitHub · 625 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago Changed · +45 lines scan B → C 83820468f5bb
11d ago First seen · 580 lines · 143 tokens per session scan B 87de01b4243c

Subscribe to this mod's changes

gocertius-suite-api is a skill published in the GitHub repository g-digital-by-Garrigues/EAD_Enterprise_Suite_MCP (0 stars, last pushed 3d ago), licensed MIT. It adds 143 tokens to every session and 14,034 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it C with 3 findings (sends data to an external url, asks for root, makes network calls). It is 100% identical to gocertius-suite-api, differing in 0 lines, and is treated as a copy.

Backend and APIs Legal and compliance

jsonapi

Strict JSON:API v1.1 specification compliance. Trigger: When creating or modifying API endpoints, reviewing API responses, or validating JSON:API compliance.

prowler-cloud/prowler · 34 tokens

validating-us-core

Validate FHIR R4 resources and Bundles against US Core / USCDI profiles with the official HL7 FHIR validator before submitting to an EHR. Covers running validatorcli.jar (or the public validator.fhir.org), declaring meta.profile, must-support elements, common conformance gaps (missing code/category/status), and…

maziyarpanahi/openmed · 134 tokens

api-compliance-checker

Designs GDPR-compliant API patterns, PCI-DSS field handling, SOC2 audit log schemas, HIPAA data endpoints, and regulatory compliance checklists for any API. Use whenever the user asks about GDPR, data privacy, "right to be forgotten", data retention APIs, PCI compliance for payments, HIPAA for health data, SOC2 audit…

LambdaTest/agent-skills · 167 tokens

adding-activity-logging

Adds or changes activity logging (the audit trail) for a Django model in PostHog. Use when a model's writes must show in the Activity side panel or the advanced activity logs, when adding ModelActivityMixin, an ActivityScope, a modelactivitysignal receiver, an activity describer, or field exclusions, when auditing…

PostHog/posthog · 153 tokens

telnyx-10dlc-curl

10DLC brand and campaign registration for US A2P messaging compliance. Assign phone numbers to campaigns.

team-telnyx/ai · 31 tokens

806-regulations-eu-data-act

Use when reviewing, designing, or modifying Java enterprise systems that expose, exchange, store, process, export, or port data across users, businesses, connected products, cloud providers, APIs, event streams, AI data pipelines, data spaces, or SaaS platforms and need EU Data Act engineering controls. This should…

jabrena/plinth · 139 tokens

EAD_Enterprise_Suite_MCP: Skill for Claude Code