External Partner API authentication
The External Partner API uses a Bearer token to authenticate requests.
Every request to the External Partner API requires a Bearer token in the
Authorization header:
Authorization: Bearer <access_token>The token controls which resources you can access. It's scoped to your company workspace and account context, so you can only get filings and imports for your own company.
Tip:
See API authentication for more details.
Authentication errors
- 401 Unauthorized
- Your token is missing, invalid, or expired. Get a new token and retry.
- 403 Forbidden
- Your token is valid, but you don't have permission for the resource or operation. Check your OAuth scope and company context.
Use errors[].subCode in the response to identify the specific cause.
Note:
Sovos sets up credentials manually. Contact Sovos to request your credentials.