The PDF API that respects your time

Quickstart

1. 1. Create a job

   curl -X POST https://www.docsgreen.com/api/v1/jobs \
     -H "Authorization: Bearer $PL_API_KEY" \
     -H "Idempotency-Key: $(uuidgen)" \
     -F tool=merge-pdf \
     -F file=@part-1.pdf -F file=@part-2.pdf \
     -F 'options={"bookmarks":true}'

2. 2. Poll the job (or receive a webhook)

   curl https://www.docsgreen.com/api/v1/jobs/JOB_ID -H "Authorization: Bearer $PL_API_KEY"
   
   {
     "id": "…", "status": "succeeded",
     "files": [{ "name": "merged.pdf", "size": 48213, "sha256": "…", "url": "https://…/api/files/…" }]
   }

3. 3. Download the result

   Result URLs are signed, time-limited and need no API key. Files are deleted when the job expires.

Verify webhooks

Every delivery carries x-webhook-id (use it to de-duplicate) and x-webhook-signature: t=<unix>,v1=<hex>, an HMAC-SHA256 of t.body with your endpoint secret. Failed deliveries are retried with backoff for about a day.

import crypto from "node:crypto";

export function verify(secret, rawBody, header) {
  const parts = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  if (Math.abs(Date.now() / 1000 - Number(parts.t)) > 300) return false;
  const expected = crypto.createHmac("sha256", secret).update(`${parts.t}.${rawBody}`).digest("hex");
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(parts.v1 ?? ""));
}

Available tools (23)