Skip to main content
Getting started with Sandbox APIs is straightforward. This guide will walk you through 3 simple steps to authenticate and make API calls using your API credentials.

​
Send your first API request

1

Get your API credentials

Login to Sandbox Console and navigate to Settings → API Keys to get your API Key and API Secret. You have two separate sets for live and test environments, identified by the prefixes “live” and “test”. Here’s how to generate your API Keys: Generate your API Keys.
Download your API key and API key secret when prompted, it’s only shown once.
2

Authenticate to get an access token

Call the Authenticate API to generate an access token. You’ll need to pass your API Key and API Secret in the request headers.
Request
curl -X POST 'https://api.sandbox.co.in/authenticate' \
     -H 'x-api-key: YOUR_API_KEY' \
     -H 'x-api-secret: YOUR_API_SECRET' \
     -H 'x-api-version: 1.0.0' \
     -H 'Content-Type: application/json'
Response
{
  "code": 200,
  "data": {
    "access_token": "eyJ0eXAiOiJKV1QiLCJhbGc..."
  },
  "timestamp": 1750687659809,
  "transaction_id": "3a31716a-6a4d-4670-83fe-849d8209e35a"
}
The access token has a validity of 24 hours. You can regenerate the token anytime using the Authenticate API.
3

Make API calls with your access token

Now you can use the access token to call any Sandbox API. Include the following headers in your requests:
  • x-api-key: Your API Key
  • authorization: Your access token
  • x-api-version (optional): API version (e.g., “1.0”)
The access token you generate is NOT a bearer token. Pass it in the authorization header without the Bearer keyword.
Request
curl -X POST 'https://api.sandbox.co.in/gst/compliance/public/gstin/search' \
     -H 'x-api-key: YOUR_API_KEY' \
     -H 'Authorization: eyJ0eXAiOiJKV1QiLCJhbGc...' \
     -H 'x-api-version: 1.0' \
     -H 'Content-Type: application/json' \
     -d '{ "gstin": "05ABNTY3290P8ZB" }'
You’re done!

​
Environment Host URLs

EnvironmentHost URL
Testhttps://test-api.sandbox.code.in
Productionhttps://api.sandbox.code.in
The same workflow works for both Test and Production environments. Use the appropriate host URL based on your environment.