Embed carbon offsetting into any transaction
One API call to purchase verified carbon credits. Works with any language, any framework. Get your API key, start offsetting in minutes, and receive real-time notifications as credits are retired.
Works with your stack
Three lines to climate action
Get an API key from the admin panel (1 min). Purchase carbon credits with one HTTP call. Receive webhook notifications automatically. No framework needed, no SDK to install.
const response = await fetch('https://api.atmosverde.com/v1/purchases', {
method: 'POST',
headers: {
'Authorization': 'Bearer sk_live_api_key',
'Content-Type': 'application/json'
},
body: JSON.stringify({
quantity_tonnes: 10,
registry: 'gold_standard'
})
});
const purchase = await response.json();
// { id: "pur_abc123", status: "allocated", tonnes: 10 }
How it works
Four steps to verified carbon retirement.
Authenticate
Get your API key from the dashboard
Calculate
Estimate emissions for any transaction
Purchase
Buy verified carbon credits instantly
Verify
Receive immutable blockchain proof
Real-time webhooks
Subscribe to lifecycle events and react in real time. Every webhook uses secure authentication and includes full payload with blockchain data when available.
purchase.confirmedTriggered when a credit purchase settles
certificate.issuedPDF certificate generated and signed
retirement.completedCredits permanently retired on-chain
proof.generatedBlockchain hash anchored and verifiable
{
"event": "proof.generated",
"data": {
"purchase_id": "pur_abc123",
"certificate_id": "cert_xyz789",
"proof": {
"pdf_url": "https://cdn.atmosverde.com/...",
"blockchain_tx": "0x1a2b3c...",
"tonnes": 10
}
}
}Seven layers of security
Every request is authenticated, authorised, signed, and logged. From transport encryption to blockchain proof.
TLS 1.3
All traffic encrypted. Certificate pinning supported for enterprise clients.
API Keys
Every request passes through identity verification. Separate live and test keys with granular permission scopes.
Rate Limiting
DDoS and abuse protection. Token-bucket rate limiting per API key with configurable burst and sustained rates.
Duplicate-Safe Requests
Same request sent twice is processed once. Safe retries on every mutating endpoint to prevent duplicate purchases.
Secure Authentication
Webhooks cannot be forged. Every notification is cryptographically signed so you can verify authenticity.
Data Isolation
Customer A cannot see Customer B's data. Every query is automatically scoped to your organisation — cross-tenant access is technically impossible.
Immutable Audit Log
Every API call logged for SOC 2 compliance. Tamper-proof, append-only event stream that cannot be altered.
Enterprise SSO
Enterprise login via Google, Microsoft, or Okta with one click. Automatic user provisioning and SOC 2 ready identity management.
Ready to integrate?
Custom Element in 5 minutes, full API in 1-2 days. No framework knowledge needed -- paste into HTML, it works.