How to Verify Purity and Endotoxin on a Peptide CoA
How do you verify endotoxin levels and purity on a third-party peptide Certificate of Analysis (CoA)?
Reviewed by Taylor Anderson, RN
Aesthetic Registered Nurse
Taylor Anderson is an aesthetic registered nurse and a reviewer for Hot or Nothing.
Updated October 16, 2026
Quick answer
To check a peptide CoA (certificate of analysis), first make sure the lot number on the report matches the lot number on your vial. Then look for four results: a mass spectrometry test showing the vial holds the right peptide, a purity result from HPLC, a measured amount inside the label's allowed range, and an endotoxin result below the limit set for that product. A high purity number alone can hide a bad vial, so the peptide CoA you can trust most comes with a prescription filled at a state-licensed pharmacy.
In this guide
Key takeaways
- Start by matching the lot number on the CoA to the lot number on your vial, because a report for a different lot tells you nothing about yours.
- A purity percentage from HPLC should come with a mass spectrometry result, since the biggest peak on the test is not always the peptide you paid for.
- Purity and amount are separate checks: a vial can hold more drug than its label says while most of the powder inside is something else.
- Endotoxins are bits of bacterial cell walls, and a vial with no live microbes can still carry them, so look for an endotoxin result below the product's limit in units that match your dose.
- A CoA only covers one lot on the day it was tested, and FDA treats "research use only" peptides as a red flag, so the most reliable route is a prescription filled at a state-licensed pharmacy.
To verify a peptide CoA, first match its lot number to the one on your vial. Then check four results: identity confirmed by mass spectrometry, purity by HPLC, the measured amount against the label, and endotoxin in EU below the limit set for that product. A purity number on its own proves little. In a lab study of semaglutide sold online without a prescription, one vial advertised 99% purity and tested at 7.70%. The CoA you can rely on most is tied to a prescription filled at a state-licensed pharmacy.
What should a peptide CoA test for?
A complete report covers five tests. Each one answers a different question about what is in your vial.
| Test | What it tells you | How labs run it | What a passing result looks like |
|---|---|---|---|
| Identity | Whether the vial holds the peptide on the label | Mass spectrometry (MS), which identifies molecules by their mass | MS confirms the main HPLC peak is your peptide |
| Purity | How much of the sample is the peptide and how much is leftovers from making it | HPLC, which separates the sample into peaks | A purity percentage for the main peak, backed by an MS identity result |
| Amount (assay) | How much peptide is in the vial compared with the label | HPLC | The measured amount falls inside the specification range printed on the report |
| Endotoxin | Whether bacterial cell-wall fragments are present | Bacterial Endotoxins Test: gel-clot, turbidimetric or chromogenic | A result in EU below the endotoxin limit set for that product |
| Sterility | Whether live microbes grew from the sample | A check for living microorganisms | No live microbes found |
Identity and purity work as a pair. HPLC splits the sample into peaks, and mass spectrometry shows which peak is the peptide you paid for and which peaks are by-products of making it.
The amount line compares what the lab measured with what the label promises, and gives an allowed range. One compounding pharmacy's third-party report for 10 mg/mL tirzepatide, shared in r/tirzepatidecompound, listed a tested concentration of 9.9225 mg/mL, an assay of 99.2% and a specification of 90 to 110%, tested by HPLC.
The endotoxin test, set out in USP chapter 85 on bacterial endotoxins, uses a reagent made from horseshoe crab blood cells. Results come in Endotoxin Units (EU), and one EU equals one International Unit (IU), so you may see either.
Sterility is its own line. It tells you whether live microbes grew, not whether endotoxin is present. In the online semaglutide study, all three tested samples had no live microbes and still contained endotoxin.
How do I check the purity and dose numbers on a CoA?
- Match the lot number. Find it on the report and on your vial. If they don't match, the report is about someone else's vial. One patient who asked their pharmacy for its reports wrote in r/tirzepatidecompound: "My vial is lot 574691, so my lot is specifically listed on that report."
- Check the method. A purity percentage from HPLC alone can mislead, because a single big peak may or may not be the right peptide. Look for a mass spectrometry identity result as well.
- Read purity and amount as two different numbers. In the lab study of semaglutide bought online without a prescription, one vial labeled 3 mg and 99% pure held 3.86 mg of semaglutide (28.56% over the label) at 7.70% purity, inside 50.1 mg of powder. That vial delivered more drug than labeled, and most of the powder was something else.
- Check the range, the lab and the date. The amount should fall inside the specification range printed on the report, and the report should name the lab and the test date. A report with no range gives you nothing to judge the result against.
How do I read the endotoxin result on a peptide CoA?
Endotoxins are pieces of bacterial cell walls. They get into peptides easily when peptides are made in ordinary lab conditions, and they set off immune signals that can cause a wide range of reactions in the body. That is why the endotoxin line matters more for anything you inject.
A passing result is an endotoxin level below the limit set for that product. The report should state both the number and the limit. Check that the units (EU per mg or EU per mL) match the way your dose is measured.
Here is what real numbers look like. In the online semaglutide study, two vials tested below 2.8658 and 2.1645 EU/mg. A third measured 8.9511 EU/mg, which the researchers said pointed to possible contamination during production. The bacteriostatic water sent with the vials was a standard off-the-shelf product, so the contamination most likely came from the peptide itself.
A vial can be labeled sterile and still carry endotoxin. Sterilizing filters do not remove endotoxins, and once endotoxin is in a product it is hard to get out. The best fix is making the peptide clean from the start.
What can't a peptide CoA tell you?
A CoA covers one lot on the day it was tested. It cannot show what happened in shipping. FDA says not to use an injectable GLP-1 that arrives warm or without enough cold packs, and to throw out a multi-dose vial 28 days after first use, even if medicine is left.
The pharmacy named on a label or report can itself be fake. FDA has found compounded semaglutide and tirzepatide whose labels named pharmacies that don't exist, or licensed pharmacies that never made the product.
A product sold "for research purposes" or "not for human consumption" is a red flag no matter how clean its CoA looks. FDA has warned companies selling semaglutide, tirzepatide, retatrutide, survodutide or mazdutide under those labels, and urges consumers not to buy them because their quality is unknown.
You can pay an independent lab to check a vial yourself. Janoshik, for example, lists comprehensive purity and composition analysis of research peptides. That covers purity and composition, so it does not replace an endotoxin result, and it adds a lab bill to every vial you want checked.
Where can I get peptides with testing I can trust?
FDA's advice is to get a prescription from a licensed prescriber and fill it at a state-licensed pharmacy. FDA also lists a company that "does not require a screening and prescription by a licensed doctor" as a warning sign.
If you have questions about the instructions or label on a compounded medicine, FDA says to contact the compounder or the telehealth company. You can also ask them for the CoA for your lot. The pharmacy in the r/tirzepatidecompound thread sent lot-matched third-party reports when the patient asked. Those were potency results, so ask for endotoxin and sterility results too.
With a prescription, you don't have to be your own quality lab. Our clinical team reviews your goal and health history and decides whether a peptide fits your plan. If you want a peptide for your skin, recovery or energy without having to check lab reports yourself, take the quiz. Your clinical team will see which treatment fits your goal.
Ready to make a move?
Answer three questions to see the treatment options that fit your goals.
See My PlanFAQ
What endotoxin level is safe in a peptide vial?
A passing endotoxin result is one below the limit set for that specific product, so there is no single number that fits every peptide. The CoA should show both the measured endotoxin level and the limit, in Endotoxin Units (EU). Check that the units, EU per mg or EU per mL, match the way your dose is measured. If the report gives a number with no limit, you have nothing to judge it against.
Is 98% HPLC purity good enough for injectable peptides?
A high HPLC purity number is not enough on its own to show an injectable peptide is good. HPLC splits the sample into peaks, and only a mass spectrometry result shows whether the main peak is the right peptide. In one lab check of semaglutide sold online, a vial advertised as 99% pure tested at 7.70%. For anything you inject, also look for an amount inside the label's range, an endotoxin result below the product's limit and a sterility result.
How much does it cost to test a peptide at Janoshik?
This article does not have a Janoshik price, so check Janoshik's own price list before you send a vial. Janoshik lists comprehensive purity and composition analysis of research peptides. That test covers purity and composition, so it does not replace an endotoxin result. It also adds a lab bill to every vial you want checked.
Are research-use-only peptides safe to inject?
FDA urges consumers not to buy peptides sold "for research purposes" or "not for human consumption" because their quality is unknown. FDA has warned companies selling semaglutide, tirzepatide, retatrutide, survodutide and mazdutide under those labels. A clean-looking CoA does not change that, since the pharmacy named on a label can itself be fake. FDA's advice is to get a prescription from a licensed prescriber and fill it at a state-licensed pharmacy.
Keep reading
Sources (5)
- Multifactor Quality and Safety Analysis of Semaglutide Products Sold by Online Sellers Without a Prescription: Market Surveillance, Content Analysis, and Product Purchase Evaluation Study - PMC · pmc.ncbi.nlm.nih.gov · captured October 15, 2026
- Microbial cell-wall contaminants in peptides: a potential source of physiological artifacts - PubMed · pubmed.ncbi.nlm.nih.gov · captured October 15, 2026
- Recommendations for the generation, quantification, storage and handling of peptides used for mass spectrometry-based assays - PMC · pmc.ncbi.nlm.nih.gov · captured October 15, 2026
- r/tirzepatidecompound: I contacted Hallandale directly about tirzepatide potency — they sent me the COAs for my lots · reddit.com · captured October 15, 2026
- 〈85〉 BACTERIAL ENDOTOXINS · usp.org · captured October 15, 2026
