DIP · Trung tâm Tác quyền số

Rights Data API

A public API to look up and verify work rights and license status.

Overview

The Rights Data API lets partners query rights profiles by DIP-ID or international identifier (ISWC/ISRC), verify work certificates and check license status (Blanket/Individual). It is a READ layer — no registration or payment.

Get a sandbox key now

Enter an email address and you get a working key immediately — no sign-in, no waiting for approval. Sandbox keys read simulated data only; the response shape is identical to production, so integration code written here works as soon as you switch to a production key (Decree 277/2026, Article 7(5)).

See the available test identifiers at GET /api/v1/public/v1/sandbox/fixtures — every record carries the SANDBOX- prefix so it can never be mistaken for real data.

Try it right here

Pick an example and press Run. The call goes straight to the API using your own sandbox key — not a mock. The data returned is SIMULATED, per Decree 277/2026 Article 7(5).

Run this to learn: Tác phẩm này của ai, chia theo tỷ lệ nào, có đang mở cấp phép không.

GET /public/v1/rights/SANDBOX-WK-MUS-2026-000001 x-api-key: (no key yet)
scope: rights:read

This example needs a key. Press the button to jump to the sandbox key section — an email address is all it takes, no approval queue.

OpenAPI specification

An OpenAPI 3.1 specification covering every public endpoint, with runnable examples. Load it straight into Postman, Insomnia or a client generator.

curl https://<domain>/api/v1/public/v1/openapi.json

Authentication

Every request needs an API key in a header. Contact DIP admin to be issued a key and appropriate scopes.

curl -H "x-api-key: rdas_live_xxxxxxxx" \
     https://<domain>/api/v1/public/v1/rights/DIP-WK-MUS-2026-000123

Base URL

https://<domain>/api/v1/public/v1

Replace <domain> with the actual DIP domain.

Rate limits

Each client has its own limit (default 60 requests/min). Responses include X-RateLimit-Limit / X-RateLimit-Remaining / X-RateLimit-Reset. Exceeding it returns HTTP 429.

Scopes

ScopeDescription
rights:readRead rights profile by DIP-ID and look up by ISWC/ISRC.
rights:verifyVerify work rights/certificate.
licenses:readRead license status (Blanket / Individual).
metadata:readRead Dublin Core metadata and record provenance.
bulk:readBulk export of published works (open data, personal information removed).
evidence:readRead the tangible-evidence package: recording timestamp, file hash, rights chain, protection term, dispute status.

Endpoints

MethodEndpointScope
GET/public/v1/rights/:lccIdrights:read
GET/public/v1/rights?iswc=… | ?isrc=…rights:read
GET/public/v1/rights/:lccId/verifyrights:verify
GET/public/v1/licenses/:id/statuslicenses:read
GET/public/v1/rights/:lccId/metadatametadata:read
GET/public/v1/rights/:lccId/provenancemetadata:read
GET/public/v1/bulk/works?page=1&limit=100bulk:read
GET/public/v1/rights/:lccId/evidenceevidence:read

Interactive OpenAPI docs (non-production) at /api/docs.

For valuation firms, banks and notaries

When you must build a file on someone else's intangible asset, the first question is always: does it exist, since when, and who holds the rights. A single endpoint returns all of it — identifier, earliest recorded timestamp, file hash for integrity checking, the chain of authors' rights and related rights, remaining term of protection, dispute status on the platform, and a public lookup link for independent verification.

Try it now, no registration required

A sandbox key is issued automatically in one call. The data is simulated, but the response shape is identical to production, so integration code written here runs unchanged with a production key.

# 1. Lấy khoá thử nghiệm (không cần đăng ký tài khoản)
curl -X POST https://<domain>/api/v1/public/v1/sandbox/register \
     -H "Content-Type: application/json" \
     -d '{"email":"ban@vidu.vn"}'

# 2. Gọi gói bằng chứng bằng khoá vừa nhận
curl -H "x-api-key: rdas_sbx_xxxxxxxx" \
     https://<domain>/api/v1/public/v1/rights/SANDBOX-WK-PHO-2026-000003/evidence

Access packages by profession

Open data catalogue

Each dataset with its fields, reuse terms, update frequency — and what it does NOT contain. Classified under Article 11(3) of Decree 277/2026.

Get an API key

DIP issues keys by agreement. Contact us to register a partner account and receive a key + scopes.

Request a key