Karnataka Drug License - License Search

Endpoint Overview

POST /api/v1/corporate/karnataka-drug-license-search

Description

The Karnataka Drug License Search API enables businesses to verify and retrieve comprehensive drug license information from the Karnataka state pharmaceutical regulatory database. This API provides real-time access to license details including firm information, validity status, address, and associated license numbers for pharmaceutical establishments operating in Karnataka.

This service is essential for maintaining regulatory compliance, conducting due diligence on pharmaceutical vendors, and ensuring that business partners hold valid drug licenses. The API supports multiple license types including wholesale, retail, and manufacturing licenses across all districts in Karnataka.

Key Benefits

Instant Verification: Real-time access to official Karnataka drug license records

Comprehensive Data: Retrieve complete license details including firm information, validity dates, and multiple associated licenses

Regulatory Compliance: Ensure vendor compliance with pharmaceutical regulations before engaging in business

Multi-District Support: Search across all Karnataka districts with district-specific data access

Use Cases

Healthcare & Pharmaceuticals

E-commerce & Marketplaces

Financial Services

Vendor Onboarding: Verify the legitimacy of pharmaceutical suppliers and distributors before establishing business relationships

Supply Chain Compliance: Maintain regulatory compliance by ensuring all partners in the pharmaceutical supply chain hold valid licenses

Periodic Audits: Conduct regular verification of existing vendor licenses to ensure continuous compliance

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token for the respective environment.

Include in Requests: Add the token to the Authorization header as Bearer YOUR_JWT_TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.app

Production: https://kyc-api.surepass.app

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	JWT Bearer token for authentication (Format: `Bearer YOUR_JWT_TOKEN`)
Content-Type	Yes	Must be set to `application/json`

Request Body

Parameter	Type	Required	Description
license_number	String	Yes	The drug license number to search (e.g., "MYB1234")
district	String	Yes	The district code where the license is registered (e.g., "bangalore_1_adc1")
license_type	String	Yes	Type of drug license to search. Valid values: "wholesale", "retail", "manufacturing"

Example Request

{
    "license_number": "MYB1234",
    "district": "bangalore_1_adc1",
    "license_type": "wholesale"
}

Process Response

Response Parameters

Parameter	Type	Description
data	Object	Container object for response data
data.client_id	String	Unique identifier for the API request transaction
data.license_number	String	The searched drug license number
data.district	String	The district code for the license
data.license_type	String	Type of drug license (wholesale/retail/manufacturing)
data.license_details	Array	Array of license detail objects
data.license_details[].firm_number	String	Unique firm registration number
data.license_details[].firm_name	String	Registered name of the pharmaceutical firm
data.license_details[].address	String	Complete registered address of the firm
data.license_details[].firm_incharge	String	Name of the person in charge of the firm
data.license_details[].validity	String	License validity date (Format: YYYY-MM-DD)
data.license_details[].other_license_number	Array	List of other associated license numbers held by the firm
status_code	Integer	HTTP status code of the response
success	Boolean	Indicates whether the request was successful
message	String	Human-readable response message
message_code	String	Machine-readable response code

Example Successful Response

{
    "data": {
        "client_id": "karnataka_drug_license_search_qiLpzRxrevGTgabMzHPV",
        "license_number": "MYB1234",
        "district": "bangalore_1_adc1",
        "license_type": "wholesale",
        "license_details": [
            {
                "firm_number": "00000",
                "firm_name": "Sample Medical Store",
                "address": "123 Sample St, City, State, 000000",
                "firm_incharge": "John Doe",
                "validity": "2025-12-31",
                "other_license_number": [
                    "DUMMY1234",
                    "DUMMY5678",
                    "DUMMY9101",
                    "DUMMY1122"
                ]
            }
        ]
    },
    "status_code": 200,
    "success": true,
    "message": "Success",
    "message_code": "success"
}

Possible Error Responses

Invalid License

Authentication Error

Invalid Parameters

Rate Limit Exceeded

{
    "data": null,
    "status_code": 404,
    "success": false,
    "message": "License not found",
    "message_code": "license_not_found"
}

This error occurs when the provided license number does not exist in the specified district or license type.

Integration Best Practices

Security Recommendations

Secure Token Storage: Store JWT tokens securely using environment variables or secure credential management systems, never hardcode them in source code

Token Rotation: Implement token refresh mechanisms and rotate tokens regularly to minimize security risks

HTTPS Only: Always use HTTPS endpoints to ensure encrypted data transmission

Input Validation: Validate and sanitize all input parameters before sending requests to prevent injection attacks

Error Handling: Implement comprehensive error handling without exposing sensitive system information in error messages

Audit Logging: Maintain detailed logs of all API calls for compliance and security audit purposes

User Experience Guidelines

Loading States: Display appropriate loading indicators while awaiting API responses to inform users of ongoing processes

Expiry Alerts: Implement proactive notifications when license validity dates are approaching expiration

Data Validation: Validate license numbers and district codes on the client side before making API calls to reduce unnecessary requests

Graceful Degradation: Handle API failures gracefully with user-friendly error messages and retry options

Response Caching: Cache successful responses appropriately to reduce API calls and improve application performance

Batch Processing: For multiple license verifications, implement queue systems to avoid overwhelming the API

Code Samples

cURL

Python

Node.js

Related APIs

Drug License Verification APIs: Additional APIs available for other state drug license verification systems across India

GST Verification API: Verify GST registration details of pharmaceutical firms for comprehensive business verification

Business PAN Verification: Cross-verify firm details with PAN information for enhanced due diligence

Address Verification API: Validate and standardize firm addresses for accurate record keeping

Compliance and Legal Considerations

Data Privacy: This API accesses public regulatory data. Ensure compliance with data protection regulations when storing or processing retrieved information

Purpose Limitation: Use retrieved license information only for legitimate business verification purposes

Data Retention: Implement appropriate data retention policies in accordance with applicable regulations

Consent Requirements: Obtain necessary consent from individuals or entities before conducting license verification where required by law

Regulatory Compliance: Ensure your use case complies with pharmaceutical regulations and state-specific laws in Karnataka

Audit Trail: Maintain comprehensive audit trails of all license verification activities for regulatory compliance and dispute resolution

Third-Party Sharing: Restrict sharing of retrieved license information with third parties unless explicitly permitted by applicable laws

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/corporate/karnataka-drug-license-search' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{ "license_number": "MYB1234", "district": "bangalore_1_adc1", "license_type": "wholesale" }'

{ "data": { "client_id": "karnataka_drug_license_search_qiLpzRxrevGTgabMzHPV", "license_number": "MYB1234", "district": "bangalore_1_adc1", "license_type": "wholesale", "license_details": [ { "firm_number": "00000", "firm_name": "Sample Medical Store", "address": "123 Sample St, City, State, 000000", "firm_incharge": "John Doe", "validity": "2025-12-31", "other_license_number": [ "DUMMY1234", "DUMMY5678", "DUMMY9101", "DUMMY1122" ] } ] }, "status_code": 200, "success": true, "message": "Success", "message_code": "success" }

License Search

Karnataka Drug License - License Search#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses