API v1 / schema 1.0.0

Authentication

Authenticate from your server.

Send a developer key as Authorization: Bearer <key> or X-Api-Key: <key>. Never place a key in a query string, public client bundle, browser storage or analytics event.

Request · illustrative example
curl 'https://api.touristtaxtools.com/v1/countries' \
  -H "Authorization: Bearer $TOURISTTAXTOOLS_API_KEY"

Scopes and restrictions

Scope Allows
countries:read Published country coverage
jurisdictions:read Jurisdiction discovery
rules:read Published rules and provenance
defaults:resolve Address/default resolution

Keys may be restricted to countries, carry an expiry and have a request limit. An operator can revoke or rotate a key. Ask for the smallest scope and country set your integration needs.

Read the access workflow ↗