NW NicotineWire
ENTERPRISE COMPLIANCE API • v1.0 50-State Vapor Registries • FDA Deficiency Notices • NetSuite / SAP Webhooks

Automate State Registry Delistings, FDA Warning Letters & ERP Shipping Holds.

When Florida, North Carolina, or Louisiana delist a nicotine SKU, or when FDA CTP issues an Import Alert #99-43 detention, distributors face $\$10,000+$ state fines and retail raids for continuing to ship. NicotineWire's proprietary API and HMAC-signed alert webhooks integrate directly into your daily ERP fulfillment workflows to block non-compliant shipments automatically.

Launch Live API Console Download Full ERP Lockout CSV Webhook Documentation

Live Interactive Compliance Console

Test real-time SKU compliance evaluations across all active state registries and FDA dockets.

GET /api/v1/compliance/check?brand=ZYN&sku=Spearmint+6mg
• 200 OK • ~12ms
ALERT WEBHOOKS • HMAC-SHA256

Push Delisting Events Directly to Your ERP / Warehouse

Subscribe your NetSuite, SAP, or custom warehouse fulfillment system to receive millisecond-level push notifications whenever a state agency (FL, NC, LA) issues a delisting order or when the FDA publishes an emergency import detention.

1. NetSuite SuiteScript 2.1 Fulfillment Interceptor (Example)

/**
 * @NApiVersion 2.1
 * @NScriptType Restlet
 */
define(['N/record', 'N/search'], function(record, search) {
    function post(context) {
        // Intercept NicotineWire Webhook
        if (context.event_type === 'state.delisting') {
            let brand = context.data.brand;
            let delistedState = context.data.state;
            
            // Block all open sales orders bound for delistedState
            log.audit('REGULATORY LOCKOUT', `Locking shipments for ${brand} to ${delistedState}`);
            // Apply hold flag in ERP...
            return { status: 'LOCKED', state: delistedState };
        }
    }
    return { post: post };
});

2. Cryptographic HMAC-SHA256 Signature Verification (Python)

import hmac, hashlib

def verify_nicotinewire_signature(payload_bytes, signature_header, secret):
    # Header format: sha256=a8f0b9f9ab8ff...
    expected = "sha256=" + hmac.new(
        secret.encode('utf-8'),
        payload_bytes,
        hashlib.sha256
    ).hexdigest()
    
    if not hmac.compare_digest(expected, signature_header):
        raise ValueError("Invalid Webhook Signature: Potential spoofing attack")
    return True

REST API Endpoints Specification (v1)

METHOD ENDPOINT DESCRIPTION SAMPLE RESPONSE
GET /api/v1/compliance/check Real-time multi-jurisdiction compliance check by brand, sku, and optional state. {"overall_status": "COMPLIANT", "erp_action": "CLEAR_TO_SHIP", ...}
GET /api/v1/compliance/delistings Chronological stream of state directory delistings. Filter by state (FL, NC, LA, OK). {"status": "success", "count": 8, "delistings": [...]}
GET /api/v1/compliance/fda-enforcement Structured FDA CTP warning letters, deficiency notices, and Import Alert #99-43 entries. {"status": "success", "notices": [...]}
GET /api/v1/compliance/export/erp Full SKU lockout table for SAP / NetSuite ingestion. Use ?format=csv or ?format=json. CSV stream (RFC 4180) or JSON schema array
POST /api/v1/webhooks/subscribe Registers client endpoint URL with event triggers (state.delisting, fda.deficiency_letter). {"status": "subscribed", "subscriber": {"id": "sub_...", "secret": "..."}}
POST /api/v1/webhooks/test Sends test signed webhook event payload to target URL with X-NicotineWire-Signature-256. {"target_url": "...", "signature_header": "sha256=...", "dispatched": true}