# Introduction
The Business Registries API is built on HTTP. The API is RESTful. It has predictable resource URIs.
The API is documented in OpenAPI format.
In addition to the standard OpenAPI syntax we use a few
vendor extensions.
# Overview
The following sections describe the resources that make up the Business Registries REST API.
## Current Version
By default, all requests to https://api.abr.ato.gov.au receive the `v1` version of the REST API. We encourage you to explicitly request this version via the `Accept` header.
Accept: application/vnd.abr-ato.v1+json
## Schema
All API access is over HTTPS, and accessed from https://api.abr.ato.gov.au. All data is sent and received as JSON. Blank fields are included.
All dates use the [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format:
YYYY-MM-DD
For example: `2017-07-01` (the 1st of July 2017)
All timestamps use the [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format:
YYYY-MM-DDTHH:MM:SSZ
For example: `2017-07-01T11:05:06+10:00`
## Timezones
Some requests allow for specifying timestamps or generate timestamps with time zone information. We apply the following rules, in order of priority, to determine timezone information for API calls.
### Explicitly provide an ISO 8601 timestamp with timezone information
For API calls that allow for a timestamp to be specified, we use that exact timestamp.
For example: `2017-07-01T11:05:06+10:00`
## Pagination
Information about pagination is provided in the [Link](https://tools.ietf.org/html/rfc5988#page-6) header.
For example:
Link:
For a quick start guide click here
If you signed up for our API through RapidAPI you can make your test calls on their platform. Your RapidAPI credentials will not work on this page.
Do not use your RapidAPI keys on this page.
If you signed up with us and have an account, you must first authenticate with your API Keys and retrieve a Json Web Token (JWT) from the /getToken endpoint to access the other endpoints.
Your JWT is a required argument to all endpoints.
Welcome to the autogenerated documentation & test tool for Avaza's API.
API Security & Authentication
Authentication options include OAuth2 Implicit and Authorization Code flows, and Personal Access Token. All connections should be encrypted over SSL/TLS
You can set up and manage your api authentication credentials from within your Avaza account. (requires Administrator permissions on your Avaza account).
OAuth2 Authorization endpoint: https://any.avaza.com/oauth2/authorize
OAuth2 Token endpoint: https://any.avaza.com/oauth2/token
Base URL for subsequent API Requests: https://api.avaza.com/
Blogpost about authenticating with Avaza's API: https://www.avaza.com/avaza-api-oauth2-authentication/
Blogpost on using Avaza's webhooks: https://www.avaza.com/avaza-api-webhook-notifications/
The OAuth flow currently issues Access Tokens that last 1 day, and Refresh tokens that last 180 days
The Api respects the security Roles assigned to the authenticating Avaza user and filters the data return appropriately.
Support
For API Support, and to request access please contact Avaza Support Team via our support chat.
User Contributed Libraries:
Graciously contributed by 3rd party users like you.
Note these are not tested or endorsesd by Avaza. We encourage you to review before use, and use at own risk.