API v1 / schema 1.0.0
Authentication
Authenticate from your server.
Send a developer key as Authorization: Bearer <key> or
X-Api-Key: <key>. Never place a key in a query string,
public client bundle, browser storage or analytics event.
curl 'https://api.touristtaxtools.com/v1/countries' \
-H "Authorization: Bearer $TOURISTTAXTOOLS_API_KEY"
Scopes and restrictions
| Scope | Allows |
|---|---|
countries:read |
Published country coverage |
jurisdictions:read |
Jurisdiction discovery |
rules:read |
Published rules and provenance |
defaults:resolve |
Address/default resolution |
Keys may be restricted to countries, carry an expiry and have a request limit. An operator can revoke or rotate a key. Ask for the smallest scope and country set your integration needs.
Read the access workflow ↗