GSTIN From Mobile Email

Endpoint Overview

POST /api/v1/corporate/gstin-from-mobile-email

Description

This API endpoint enables you to retrieve the GSTIN (Goods and Services Tax Identification Number) associated with a given mobile number or email address. It is designed for businesses and platforms that need to verify or fetch GSTIN details quickly and reliably, using minimal input. By providing either a mobile number or an email address, you can obtain the corresponding GSTIN, streamlining onboarding, compliance, and verification workflows.

Key Benefits

Simplifies GSTIN retrieval using just a mobile number or email—no need for full business details.

Accelerates KYC and onboarding processes for corporate clients.

Reduces manual errors and improves data accuracy.

Enhances compliance by ensuring GSTIN validation is automated and up-to-date.

Use Cases

Fintech & Banking

E-commerce & Marketplaces

Logistics & Supply Chain

Automate GSTIN verification during business account onboarding.

Streamline loan application processes by validating business credentials.

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.app

Production: https://kyc-api.surepass.app

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token in the format `Bearer <JWT>`
Content-Type	Yes	Must be `application/json`

Request Body

Parameter	Type	Required	Description
mobile_number	string	No*	Mobile number to search GSTIN (10 digits, India)
email	string	No*	Email address to search GSTIN

*Either mobile_number or email is required. At least one must be provided.

Example Request

{
  "mobile_number": "8271987658"
}

{
  "email": "abc@gmail.com"
}

Process Response

Response Parameters

Parameter	Type	Description
data	object	Contains the GSTIN lookup result
data.client_id	string	Unique request identifier
data.mobile_number	string	Mobile number used in the request (if provided)
data.email	string	Email used in the request (if provided)
data.gstin	string	GSTIN associated with the provided mobile/email
status_code	number	HTTP status code (e.g., 200 for success)
success	boolean	Indicates if the request was successful
message	string	Human-readable status message
message_code	string	Machine-readable status code

Example Successful Response

{
  "data": {
    "client_id": "gstin_from_mobile_email_UetzhYfuyzpsrfPGbYhM",
    "mobile_number": "8271987658",
    "email": null,
    "gstin": "09ABBCS1234D1ZN"
  },
  "status_code": 200,
  "success": true,
  "message": "Success",
  "message_code": "success"
}

Possible Error Responses

Missing Parameters

Invalid Credentials

Not Found

{
  "status_code": 400,
  "success": false,
  "message": "Either mobile_number or email is required.",
  "message_code": "missing_parameter"
}

The request did not include either a mobile number or an email address.

Integration Best Practices

Security Recommendations

Always use HTTPS to protect sensitive data in transit.

Store JWT tokens securely and rotate them regularly.

Never expose your API keys or tokens in client-side code.

User Experience Guidelines

Validate user input before sending requests (e.g., check mobile/email format).

Display clear error messages to users for missing or invalid input.

Handle and log error responses gracefully for troubleshooting.

Code Samples

cURL

Python

Node.js

Related APIs

GSTIN Lookup by PAN – Retrieve GSTIN using a PAN number.
GSTIN Verification – Validate the authenticity of a GSTIN.
Corporate KYC APIs – Suite of APIs for business verification and onboarding.

Compliance and Legal Considerations

Ensure that you have obtained user consent before accessing or verifying GSTIN details. Use this API in accordance with applicable data protection and privacy regulations (such as the IT Act, GDPR, etc.). Do not use the API for unauthorized or unlawful purposes.

This documentation provides a comprehensive, developer-friendly guide for integrating the GSTIN Lookup by Mobile Number or Email API into your applications. For further support, refer to Surepass API documentation or contact your Surepass representative.

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/corporate/gstin-from-mobile-email' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{ "mobile_number": "8271987658" }'

{ "data": { "client_id": "gstin_from_mobile_email_UetzhYfuyzpsrfPGbYhM", "mobile_number": "8271987658", "email": null, "gstin": "09ABBCS1234D1ZN" }, "status_code": 200, "success": true, "message": "Success", "message_code": "success" }

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses