GSTIN By PAN

Endpoint Overview

POST /api/v1/corporate/gstin-by-pan

Description

The GSTIN By PAN API enables you to retrieve all Goods and Services Tax Identification Numbers (GSTINs) associated with a specific Permanent Account Number (PAN). This API provides a comprehensive list of all GST registrations across different states in India for a given PAN, including their current status, state of registration, and state codes.

Key Benefits

Instantly verify if a business entity has GST registrations across multiple states

Validate the active status of all GSTINs associated with a PAN

Streamline KYC processes by retrieving all GST registrations in a single API call

Reduce manual verification efforts and improve operational efficiency

Use Cases

Financial Services

E-commerce

Enterprise Solutions

Verify business client GST registrations during onboarding

Assess business footprint across states for credit evaluation

Validate tax compliance status before loan disbursement

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.io

Production: https://kyc-api.surepass.io

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token for authentication (JWT format)
Content-Type	Yes	Application/json

Request Body

Parameter	Type	Required	Description
id_number	String	Yes	PAN number for which GST registrations need to be retrieved. Must be a valid 10-character PAN format.

Example Request

{
    "id_number": "ABCCS1234R"
}

Process Response

Response Parameters

Parameter	Type	Description
data	Object	Contains the response data
data.pan_number	String	The PAN number that was queried
data.client_id	String	Unique identifier for the API request
data.gstin_list	Array	List of all GSTINs associated with the PAN
data.gstin_list[].gstin	String	The 15-character GSTIN
data.gstin_list[].state	String	Full name of the state where GSTIN is registered
data.gstin_list[].state_code	String	Two-digit state code as per GST system
data.gstin_list[].active_status	String	Current status of the GSTIN (Active/Inactive)
status_code	Integer	HTTP status code of the response
success	Boolean	Indicates if the API call was successful
message	String	Additional information (null if successful)
message_code	String	Code indicating the status of the request

Example Successful Response

{
    "data": {
        "pan_number": "ABCCS1234R",
        "client_id": "gstin_pan_PGeGyeJfmPdttQkJMcBP",
        "gstin_list": [
            {
                "gstin": "07ABCCS1234R2ZT",
                "state": "Delhi",
                "state_code": "07",
                "active_status": "Active"
            },
            {
                "gstin": "07ABCCS1234R2ZT",
                "state": "Delhi",
                "state_code": "07",
                "active_status": "Inactive"
            }
        ]
    },
    "status_code": 200,
    "success": true,
    "message": null,
    "message_code": "success"
}

Possible Error Responses

Invalid PAN Format

PAN Not Found

Authentication Error

{
    "data": null,
    "status_code": 400,
    "success": false,
    "message": "Invalid PAN format. PAN should be 10 characters with valid pattern.",
    "message_code": "invalid_input"
}

The provided PAN number does not match the required format or pattern.

Integration Best Practices

Security Recommendations

Store API keys securely and never expose them in client-side code

Implement proper error handling to prevent leaking sensitive information

Use HTTPS for all API communications to ensure data encryption

Implement IP whitelisting for production environments if supported

User Experience Guidelines

Implement proper validation for PAN format before making API calls

Display appropriate loading indicators during API calls

Provide clear error messages to end-users when verification fails

Consider caching results (where appropriate) to improve response times

Code Samples

cURL

Python

Node.js

Related APIs

PAN Verification API - Validates and verifies PAN details

GSTIN Verification API - Verifies a specific GSTIN and retrieves business details

Business Verification API - Comprehensive business verification including PAN, GSTIN, and other business documents

Compliance and Legal Considerations

This API retrieves information from government GST databases. The data should be used in compliance with applicable data protection laws and regulations. Ensure you have proper consent from the business entity before retrieving their GST information. The data should not be stored longer than necessary for your business purpose.

{ "data": { "pan_number": "ABCCS1234R", "client_id": "gstin_pan_PGeGyeJfmPdttQkJMcBP", "gstin_list": [ { "gstin": "07ABCCS1234R2ZT", "state": "Delhi", "state_code": "07", "active_status": "Active" }, { "gstin": "07ABCCS1234R2ZT", "state": "Delhi", "state_code": "07", "active_status": "Inactive" } ] }, "status_code": 200, "success": true, "message": null, "message_code": "success" }

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

GSTIN By PAN

GSTIN By PAN#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses

GSTIN By PAN

Description

Use Cases

Technical Implementation

Request Headers

Request Body

Example Request

Response Parameters

Example Successful Response

Possible Error Responses

Integration Best Practices

Code Samples