Upload, query, and delete the CSDs in your account. The same certificates you manage in the CFDI Stamp Management (ADT), from your code.
View SDKs✓Before you start
- 1Get a Bearer Token using your SW username and password. We recommend using an infinite (non-expiring) token. All five operations require it in the
Authorizationheader. - 2Have the issuer’s
.cerand.keyfiles in Base64, plus the private key password, at hand. For testing, use the current test CSDs. - 3Upload the CSD once per issuer. After that you can stamp: the Stamping service uses the CSDs you have uploaded.
💡 Important: To manage your certificates through a graphical interface, you can use the CFDI Stamp Management (ADT).
URLs
Select your active environment. The copy buttons and the code examples below are built with the base URL you choose here.
🛠️ Sandbox:
https://services.test.sw.com.mx
🚀 Production:
https://services.sw.com.mx
🔗 Endpoint
Three actions on the same resource. Pick one and its full reference is built below: endpoint, headers, parameters, example, and response.
Uploads an issuer’s CSD to your account. This service receives the .cer and .key in Base64, plus the private key password. It’s the prerequisite for stamping with that RFC.
POST/certificates/save
Property
Usage
Description
Authorization
REQUIRED
Bearer {token} — token obtained from the authentication service.
Content-Type
REQUIRED
application/json — the body is sent as JSON.
Property
Usage
Description
type
REQUIRED
Certificate type. Use the value “stamp”.
b64Cer
REQUIRED
Content of the .cer file in Base64.
b64Key
REQUIRED
Content of the .key file in Base64.
password
REQUIRED
Private key password.
💡 Note: If no certificates have been uploaded, the query returns
success with an empty data array.GET/certificates
Property
Usage
Description
Authorization
REQUIRED
Bearer {token} — token obtained from the authentication service.
Returns a single certificate by its serial number. Useful to check its validity before stamping.
GET/certificates/{noCertificado}
Property
Usage
Description
Authorization
REQUIRED
Bearer {token} — token obtained from the authentication service.
Property
Usage
Description
noCertificado
REQUIRED
20-digit serial number of the certificate to retrieve.
Returns all the uploaded certificates for a single taxpayer.
GET/certificates/rfc/{rfc}
Property
Usage
Description
Authorization
REQUIRED
Bearer {token} — token obtained from the authentication service.
Property
Usage
Description
rfc
REQUIRED
Taxpayer RFC to query, including the homoclave.
Service that deletes a certificate from the account, using the certificate number as a parameter.
DELETE/certificates/{noCertificado}
Property
Usage
Description
Authorization
REQUIRED
Bearer {token} — token obtained from the authentication service.
Property
Usage
Description
noCertificado
REQUIRED
Serial number of the certificate to delete.
Request Example
💡 Note: These examples are based on the SW SDKs, but you can call the REST API directly from any language you prefer.
Response
Property
Type
Description
data
string
Confirmation message: “CSD Guardados Correctamente.” (CSD saved successfully)
status
string
Always “success” in a 200 response.
Cause: One of the three values (b64Cer, b64Key, password) is missing or empty. It also happens when the Base64 was truncated while building the JSON.
Solution: Send all four properties with a value. Generate the Base64 of the complete .cer and .key files —without line breaks— and make sure the password is the private key’s password, not the e.firma one.
Property
Type
Description
message
string
Message or code returned when an error occurs.
messageDetail
string | null
More descriptive error message, when available.
data
null
Always null: the certificate was not saved.
status
string
Always “error” in a failed response.
Cause: One of the files (.cer or .key) is incomplete or contains whitespace.
Solution: Send all four properties, with the Base64 of the complete .cer and .key files, without line breaks or whitespace.
Property
Type
Description
message
string
Message or code returned when an error occurs.
messageDetail
string | null
More descriptive error message, when available.
data
null
Always null: the certificate was not saved.
status
string
Always “error” in a failed response.
Property
Type
Description
data[].issuer_rfc
string
RFC of the issuer that owns the certificate.
data[].certificate_number
string
20-digit CSD serial number.
data[].csd_certificate
string
Certificate in Base64.
data[].is_active
boolean
false when the certificate was disabled or has expired.
data[].issuer_business_name
string
Issuer’s legal name (razón social).
data[].valid_from
string
CSD validity start date.
data[].valid_to
string
CSD validity end date.
data[].certificate_type
string
Certificate type: “stamp” for signing.
status
string
Always “success” in a 200 response.
Cause: The Bearer Token was sent incomplete, truncated, or without the “Bearer ” prefix.
Solution: Send the full token in the Authorization header. Cache it and renew it before it expires instead of requesting a new one for every query.
Property
Type
Description
message
string
Message or code returned when an error occurs.
messageDetail
string | null
More descriptive error message, when available.
data
null
Always null: the query was not executed.
status
string
Always “error” in a failed response.
Property
Type
Description
data.issuer_rfc
string
RFC of the issuer that owns the certificate.
data.certificate_number
string
20-digit CSD serial number.
data.csd_certificate
string
Certificate in Base64.
data.is_active
boolean
false when the certificate was disabled or has expired.
data.issuer_business_name
string
Issuer’s legal name (razón social).
data.valid_from
string
CSD validity start date.
data.valid_to
string
CSD validity end date.
data.certificate_type
string
Certificate type: “stamp” for signing.
status
string
Always “success” in a 200 response.
Cause: The serial number doesn’t exist in the account, is mistyped —missing a digit— or the certificate has already been disabled.
Solution: Copy the certificate_number exactly as returned by “Get all”: it has 20 digits. If the certificate is disabled, upload it again with the Upload operation.
Property
Type
Description
message
string
Message or code returned when an error occurs.
messageDetail
string | null
More descriptive error message, when available.
data
Array/null
Array of objects with information about the issuer’s CSD certificates, such as RFC, validity, serial number, and status.
status
string
Always “error” in a failed response.
Property
Type
Description
data[].issuer_rfc
string
RFC of the issuer that owns the certificate.
data[].certificate_number
string
20-digit CSD serial number.
data[].csd_certificate
string
Certificate in Base64.
data[].is_active
boolean
false when the certificate was disabled or has expired.
data[].issuer_business_name
string
Issuer’s legal name (razón social).
data[].valid_from
string
CSD validity start date.
data[].valid_to
string
CSD validity end date.
data[].certificate_type
string
Certificate type: “stamp” for signing.
status
string
Always “success” in a 200 response.
Cause: The RFC format is invalid: it’s missing the homoclave, or contains spaces or hyphens.
Solution: Send the RFC in uppercase, without spaces or hyphens, and including the homoclave. If the format is correct and it still fails, make sure that RFC has certificates uploaded to the account.
Property
Type
Description
message
string
Message or code returned when an error occurs.
messageDetail
string
More descriptive error message, when available.
data
Array/null
Array of objects with information about the issuer’s CSD certificates, such as RFC, validity, serial number, and status.
status
string
Always “error” in a failed response.
Property
Type
Description
data
string
Confirmation message with the number of the disabled certificate.
status
string
Always “success” in a 200 response.
Cause: The serial number doesn’t match an active certificate in the account, or it was already deleted.
Solution: Verify the certificate_number with “Get all” before deleting. If the error persists with a valid number, email soporte@sw.com.mx with the serial number.
Property
Type
Description
message
string
Message or code returned when an error occurs.
messageDetail
string | null
More descriptive error message, when available.
data
String/null
Confirmation message that the CSDs were deleted successfully.
status
string
Always “error” in a failed response.