Free for anyone

Free API key, instantly

HLA-Verify is free. Enter your email address and your key appears on this page straight away: 1,000 calls a day and 250 typings per call. There is no review and no wait. Verified labs that need more can have 10,000 calls a day by request.

Get a free key What each tier gets API reference

Get your free key

Your key is shown once, here, as soon as you ask. Copy it then. We keep your email address with the key and use it only for service notices.

Send allele names and typing strings, not patient identifiers. The service does not need names, dates of birth or record numbers to answer, and does not want them. De-identifying before you call is the caller's responsibility. The privacy policy says exactly what is and is not kept, and the terms of use cover the rest.

Your key

Your API key (shown once, so copy it now)

How to use it

Send it in the X-API-Key header on every request:

curl -s https://api.hlaverify.com/v1/verify \
  -H 'X-API-Key: YOUR_KEY' -H 'content-type: application/json' \
  -d '{"text": "HLA-A*02:01, B*07:02"}'

For an AI agent, add the MCP server with the key as a bearer token (MCP setup):

{"mcpServers": {"hla-verify": {"url": "https://api.hlaverify.com/mcp",
  "headers": {"Authorization": "Bearer YOUR_KEY"}}}}

Every response shows the calls you have left today in x-hla-verify-daily-remaining. The API reference lists every endpoint.

Have JavaScript off, or would rather write? Email hello@hlaverify.com and we will send you a key.

The rules, plainly

1,000 calls a day per key, 250 typings per call and 60 requests a minute. Quotas reset at midnight UTC.
One key per email address. If you ask again we will not show the key a second time. Lost it? Email hello@hlaverify.com from the same address and we will replace it.
No throwaway inboxes, and at most three new keys a day from one connection. Keys used for abuse are switched off.
What is stored: your email address with the key, plus the organisation and use if you gave them, the time, and the country Cloudflare reports for the connection. Not your IP address. The email address is used for service notices only. It is never sold, shared or added to a sequence. The privacy policy lists every field.

Need more than 1,000 a day?

Verified laboratories, transplant centres, registries and research groups can have the Lab tier: 10,000 calls a day and 5,000 typings per call, also free. Email hello@hlaverify.com from your work address with your organisation and what you are checking. Or have an agent apply with "tier": "lab" on POST /v1/research-access. We verify the organisation, and approved Lab keys are emailed to you. Personal webmail addresses take longer, because a person reviews them. Enterprise and self-hosting are by agreement.

Anonymous use with no key stays open at 100 calls a day per IP.

The same for every caller

The same engine and the same release. There is no reduced mode. Every response names the IPD-IMGT/HLA release it was computed against, which is what makes a result reproducible at review time.
The same data handling. Request content is processed in memory and discarded. See privacy for what is and is not kept.
A direct line. Questions, and reports of anything that looks wrong, reach the person who built the engine, through support or hello@hlaverify.com.

What we ask in return

Tell us when something is wrong. A disagreement with the database is a bug, and it gets fixed and published.
Name the release. If a result depends on nomenclature, record the release version. Every response carries it.
Cite the reference database in published work: IPD-IMGT/HLA (Barker DJ et al., Nucleic Acids Research 2025). Citing HLA-Verify as well is welcome, not required.

Read the API reference HLA-Bench results Pricing