Overview - TaxRock API

The API comes in two configurations:

	Direct access	Delegate access
Who authorizes	TaxRock, by issuing a credential for an organization	A TaxRock user, by consenting once
Credential	Client ID and secret (client credentials grant)	Client ID and secret, plus a refresh token per connected user (authorization code with PKCE)
What it reads	The TaxRock organization the credential was issued for	What the connected user can access in TaxRock

Each configuration’s endpoints are listed in its API reference.

Direct access

Get a token with your client credentials and make your first call.

Delegate access

Connect a TaxRock user and make your first call on their behalf.

Sandbox and production

Build against the sandbox first. Credentials are issued per environment.

	Sandbox	Production
Auth domain	`login-demo.taxrock.com`	`login.taxrock.com`
Direct access API base	`https://api-demo.taxrock.com`	`https://api.taxrock.com`
Delegate access API base	`https://delegate-demo.api.taxrock.com`	`https://delegate.api.taxrock.com`

The audience is the same in both environments: https://api.taxrock.com for direct access and https://delegate.api.taxrock.com for delegate access.

Direct access

Delegate access

​Sandbox and production

Sandbox and production