Colombian legislation moves to the Gestor Normativo

From today, Colombian legislation in Croma comes from Función Pública's Gestor Normativo: more than 40,000 norms, from laws and decrees to conceptos, rulings and circulars, each with its consolidated text, the subjects it is filed under and the later norms that added to, modified or repealed it. The two Legalize endpoints are deprecated as of today and stop answering on 30 September 2026.

Why the change#

Legalize is an external service. We don't control how it updates its data, when it fixes an error or how long it keeps the service running, so we couldn't stand behind those endpoints with the support we give the rest of the API.

So we started maintaining our own source of truth for Colombian legislation, one we do control: the Gestor Normativo, complete, organized and up to date, with as_of on every response telling you how current the data is. When something breaks, we see it and fix it ourselves, without waiting on a third party, and we can answer for every norm when you write to us.

How to migrate#

The request and the response change, so migrating takes more than a new path. Find a law by type, number and year:

curl https://api.croma.run/co/funcion-publica/norms-search/v1 \
  -H "Authorization: Bearer $CROMA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "document_type": "ley",
    "number": "1266",
    "year": 2008
  }'

Each result's id (34488 for Ley 1266 de 2008) is the norm_id that fetches the full norm:

curl https://api.croma.run/co/funcion-publica/norm/v1 \
  -H "Authorization: Bearer $CROMA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "norm_id": "34488" }'

What happens until 30 September#

• The Legalize endpoints keep answering unchanged. Every response carries the Deprecation and Sunset headers, a Link with rel="successor-version" and a deprecation field in the body.
• Legalize no longer appears as a tool on the MCP server or on the site's tools. Agents connected over MCP have funcion_publica_norms_search and funcion_publica_norm.
• From 30 September 2026 both paths answer 410 with code: "endpoint_retired" and the same Link to the successor.

The versioning policy gives 90 days' notice before an endpoint retires. These two get 14, and the policy says so next to the list of deprecated endpoints.

The guide is at Función Pública.