Skip to main content
Generate and download TDS and TCS certificates as PDF ZIP files. Choose Enriched APIs to let Sandbox manage authentication and sessions using saved credentials. With APIs, you authenticate the deductor and manage token refresh.

Choose your integration

Choose who manages the deductor’s TRACES login and session.

Supported certificates

The certificate APIs support these forms under the Income-tax Act, 2025. Form 130 is available only through Enriched APIs. The Income Tax Department documents these mappings in its Form 130 FAQs, Form 131 FAQs, and Form 133 FAQs.

Before you start

Prepare the following:
  • A Sandbox API key and Sandbox access token from the Quickstart guide.
  • The TAN and the TRACES credentials for an administrator or sub-user. Sub-user login also requires the sub-user’s PAN.
  • The certificate type, tax year, and quarter.
  • A statement that TRACES has processed, with certificates available for the requested period.
For Enriched APIs, save the TRACES credentials for the TAN. Send your Sandbox access token in the Authorization header for certificate requests. You do not need to authenticate the deductor or refresh its session separately. For APIs, authenticate the deductor with your Sandbox access token. Send the returned deductor access token in the Authorization header for certificate requests. When it expires, refresh the deductor session and continue polling the same job.
Form 130 certificate generation is available after the tax year ends and TRACES processes the corresponding Form 138 statement.

Create a job and download certificates

Both integrations return a job_id and use the same certificate job statuses and download fields.
1

Create a certificate job

Select the certificate_type in the endpoint path and send the tax year and quarter in the request body. Enriched APIs also require the TAN in the body. Save the returned data.job_id.
2

Check the job status

Poll with the same certificate type and the returned job_id. If the job fails, read the reason in data.message. Enriched APIs also support certificate webhook notifications.
3

Download the PDF ZIP files

When data.status is succeeded, download each ZIP file from data.certificate_pdf_zip_urls in the status response.

Enriched APIs

Save the TAN’s TRACES credentials before creating a certificate job. If the credentials are already saved, you do not need to add them again.

APIs

Authenticate the deductor before creating a certificate job. For a complete request sequence, see Generate certificates with a deductor token.