Get an authorization
The authorizations.get operation: GET /api/v1/authorizations/{id} in the REST API and the authorizations_get tool in the MCP server.
GET
/api/v1/authorizations/{id}Returns one authorization of the legal entity: who may act, the kind of authority, the regimes and portals it
covers, its validity (status as of now), its document and the non-secret access notes. Ownrecord records
authorizations; it can't verify that they are legally valid.
At a glance
- REST:
GET /api/v1/authorizations/{id} - MCP tool:
authorizations_get - Operation ID:
authorizations.get - Scope: Legal entity
- Permission:
tasks:read - Risk tier:
read - Dry run: Not supported
- Idempotency: Not needed (read only)
- Modes: Test and live
- Authentication: API key with the
tasks:readscope - Since: M10
Request
Path parameters
| Field | Type | Description |
|---|---|---|
id | atz_… ID |
Query parameters
This operation takes no query parameters.
Response
200 OK with a JSON object:
| Field | Type | Description |
|---|---|---|
id | atz_… ID | |
object | "authorization" | |
entityId | ent_… ID | |
livemode | boolean | |
regimeIds | array of string | |
holder | object | |
holder.type | one of person, firm, app | |
holder.name | string | |
holder.contact | string or null | |
holder.appInstallationId | ains_… ID or null | |
kind | one of employee_eid, power_of_attorney, tax_representative, fiscal_representative, api_oauth | |
documentFileId | file_… ID or null | |
validFrom | date-time | |
validTo | date-time or null | |
portals | array of string | |
accessNotes | object or null | |
status | one of active, expired, revoked, not_yet_valid | |
revokedAt | date-time or null | |
revocationReason | string or null | |
createdAt | date-time | |
updatedAt | date-time | |
version | integer (at least 1) |
Examples
An employee with an eID
HTTP
GET /api/v1/authorizations/atz_01m4ttwd3veh9apbewxheq5xa3
Authorization: Bearer or_test_…
Response (200):
JSON
{
"id": "atz_01m4ttwd3veh9apbewxheq5xa3",
"object": "authorization",
"entityId": "ent_01m4ttwd3veh9apbewxheq5xh4",
"livemode": true,
"regimeIds": ["EU_OSS_UNION"],
"holder": {
"type": "person",
"name": "Ana Horvat",
"contact": "ana.horvat@example.com",
"appInstallationId": null
},
"kind": "employee_eid",
"documentFileId": null,
"validFrom": "2026-01-01T00:00:00.000Z",
"validTo": "2027-12-31T23:00:00.000Z",
"portals": ["Croatian Tax Administration OSS portal (ePorezna)"],
"accessNotes": {
"method": "eid",
"renewalDueAt": "2027-11-30T23:00:00.000Z",
"notes": "Ana signs in with her personal eID card."
},
"status": "active",
"revokedAt": null,
"revocationReason": null,
"createdAt": "2026-01-05T10:00:00.000Z",
"updatedAt": "2026-01-05T10:00:00.000Z",
"version": 1
}
Errors
| Code | HTTP status | When | What to do |
|---|---|---|---|
resource_not_found | 404 | No authorization with this ID for this entity in this mode. | Check the ID and that your credentials are scoped to the right organization, entity, brand and mode. |
scope_required | 400 | The request names no legal entity. | Call the operation with credentials or a target at its level: an organization, a legal entity, a brand or the platform (details.required_scope). |
permission_denied | 403 | You can't see this entity's tasks and authorizations. | Ask an organization owner or admin for a role or scope that allows this action. |
It can also return these common errors: validation_failed, api_version_unsupported, authentication_required, api_key_invalid, dry_run_not_supported, rate_limited, internal_error.