POST

api

products

check-eligibility

Check Eligibility

curl --request POST \
  --url https://api.example.com/api/v2/products/check-eligibility

const options = {method: 'POST'};

fetch('https://api.example.com/api/v2/products/check-eligibility', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v2/products/check-eligibility",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v2/products/check-eligibility"

	req, _ := http.NewRequest("POST", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v2/products/check-eligibility")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)

response = http.request(request)
puts response.read_body

Check Eligibility

Check if a product is HSA/FSA eligible using its UPC code or name, without creating a product. Useful for pre-validation during product import or catalog setup.

Authentication

Authorization: Bearer glm_test_YOUR_API_KEY

Request Body

{
  "upc_code_or_gtin": "14567890123456",
  "product_name": "Digital Blood Pressure Monitor"
}

Parameters

At least one parameter is required:

Parameter	Type	Required	Description
`upc_code_or_gtin`	string	No*	UPC or GTIN barcode
`product_name`	string	No*	Product name

*At least one of upc_code_or_gtin or product_name must be provided. UPC is more accurate.

Request

POST /api/v2/products/check-eligibility

Response

{
  "hsa_fsa_eligible": true,
  "message": "SIGIS verified - Medical device",
  "checked_at": "2025-10-18T14:30:00Z",
  "upc_code_or_gtin": "14567890123456",
  "product_name": "Digital Blood Pressure Monitor"
}

Response Fields

Field	Type	Description
`hsa_fsa_eligible`	boolean	Whether product is HSA/FSA eligible
`message`	string	Explanation of eligibility status
`checked_at`	timestamp	When eligibility was checked

Examples

curl -X POST https://api.withgale.com/api/v2/products/check-eligibility \
  -H "Authorization: Bearer glm_test_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "upc_code_or_gtin": "14567890123456",
    "product_name": "Digital Blood Pressure Monitor"
  }'

Not Eligible Response

{
  "hsa_fsa_eligible": false,
  "message": "Product not found in SIGIS database. May not be HSA/FSA eligible or requires manual review.",
  "checked_at": "2025-10-18T14:30:00Z",
  "upc_code_or_gtin": "99999999999999",
  "product_name": "Regular Consumer Product"
}

Dual-Purpose Products

Some products require a Letter of Medical Necessity (LMN):

{
  "hsa_fsa_eligible": true,
  "message": "Eligible with Letter of Medical Necessity (LMN). Customer must provide doctor's note.",
  "checked_at": "2025-10-18T14:30:00Z",
  "product_name": "Vitamin D Supplements"
}

Rate Limits

Test mode: 100 requests/minute
Live mode: 1000 requests/minute

For bulk checking, add 100ms delay between requests.

Errors

Status Code	Error Code	Description
400	`invalid_request`	Missing both UPC and product name
401	`unauthorized`	Invalid or missing API key
422	`validation_error`	Invalid UPC format
429	`rate_limit_exceeded`	Too many requests

Example error:

{
  "error": {
    "code": "invalid_request",
    "message": "Either upc_code_or_gtin or product_name must be provided"
  }
}

Important Notes

Eligibility can change. SIGIS database updates monthly. Re-check eligibility periodically for existing products.

Not a guarantee. Eligibility check indicates SIGIS database status. Final determination depends on customer’s HSA/FSA administrator.

Create Product - POST /api/v2/products
Get Product - GET /api/v2/products/
Update Product - PUT /api/v2/products/
List Products - GET /api/v2/products

Product Object

Create SubscriptionCreate a recurring payment subscription

Check Eligibility

curl --request POST \
  --url https://api.example.com/api/v2/products/check-eligibility

const options = {method: 'POST'};

fetch('https://api.example.com/api/v2/products/check-eligibility', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v2/products/check-eligibility",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v2/products/check-eligibility"

	req, _ := http.NewRequest("POST", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v2/products/check-eligibility")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)

response = http.request(request)
puts response.read_body

Getting Started

Integration Guides

Core Objects

Checkout

Payment Links

Orders

Products

Subscriptions

Webhooks & Errors

Check Eligibility

Check Eligibility

Authentication

Request Body

Parameters

Request

Response

Response Fields

Examples

Not Eligible Response

Dual-Purpose Products

Rate Limits

Errors

Important Notes

​Check Eligibility

​Authentication

​Request Body

​Parameters

​Request

​Response

​Response Fields

​Examples

​Not Eligible Response

​Dual-Purpose Products

​Rate Limits

​Errors

​Important Notes

​Related Endpoints

​Related Resources

Check Eligibility

Authentication

Request Body

Parameters

Request

Response

Response Fields

Examples

Not Eligible Response

Dual-Purpose Products

Rate Limits

Errors

Important Notes

Related Endpoints

Related Resources