Skip to main content
After consenting to share the tax data in their TaxRock account with your application, the TaxRock Delegate API provides access to the live federal tax compliance details and overall status of business entities and individuals. This data can be used to let a TaxRock customer keep an eye on their clients’ up-to-date IRS standing without leaving your app, or simply to enrich the data powering your application.
You read TaxRock data on a TaxRock user’s behalf, after the user grants consent once. It is a standard OAuth 2.0 Authorization Code + PKCE integration.

​
How it works

1

The user connects (once)

You send the user to TaxRock to log in and consent. TaxRock redirects back to your app with an authorization code.
2

Your backend gets tokens

Exchange the code for a long-lived refresh token and a short-lived access token. Store the refresh token securely, per end-user.
3

You call the API

Send the access token as a Bearer credential. When it expires (~1 hour), exchange the refresh token for a new one.
Start with the Quickstart to get from zero to a successful call.

​
Sandbox vs. production

Everything defaults to the sandbox while you build. Two base URLs change between environments. The audience is the same in both.
Your client_id and client_secret are delivered to you per environment. Send us your callback URL so we can register it before the connect flow will work.