Skip to content

Get an authorization

The authorizations.get operation: GET /api/v1/authorizations/{id} in the REST API and the authorizations_get tool in the MCP server.

GET/api/v1/authorizations/{id}

Returns one authorization of the legal entity: who may act, the kind of authority, the regimes and portals it covers, its validity (status as of now), its document and the non-secret access notes. Ownrecord records authorizations; it can't verify that they are legally valid.

At a glance

  • REST: GET /api/v1/authorizations/{id}
  • MCP tool: authorizations_get
  • Operation ID: authorizations.get
  • Scope: Legal entity
  • Permission: tasks:read
  • Risk tier: read
  • Dry run: Not supported
  • Idempotency: Not needed (read only)
  • Modes: Test and live
  • Authentication: API key with the tasks:read scope
  • Since: M10

Request

Path parameters

FieldTypeDescription
idatz_… ID

Query parameters

This operation takes no query parameters.

Response

200 OK with a JSON object:

FieldTypeDescription
idatz_… ID
object"authorization"
entityIdent_… ID
livemodeboolean
regimeIdsarray of string
holderobject
holder.typeone of person, firm, app
holder.namestring
holder.contactstring or null
holder.appInstallationIdains_… ID or null
kindone of employee_eid, power_of_attorney, tax_representative, fiscal_representative, api_oauth
documentFileIdfile_… ID or null
validFromdate-time
validTodate-time or null
portalsarray of string
accessNotesobject or null
statusone of active, expired, revoked, not_yet_valid
revokedAtdate-time or null
revocationReasonstring or null
createdAtdate-time
updatedAtdate-time
versioninteger (at least 1)

Examples

An employee with an eID

HTTP
GET /api/v1/authorizations/atz_01m4ttwd3veh9apbewxheq5xa3
Authorization: Bearer or_test_…

Response (200):

JSON
{
  "id": "atz_01m4ttwd3veh9apbewxheq5xa3",
  "object": "authorization",
  "entityId": "ent_01m4ttwd3veh9apbewxheq5xh4",
  "livemode": true,
  "regimeIds": ["EU_OSS_UNION"],
  "holder": {
    "type": "person",
    "name": "Ana Horvat",
    "contact": "ana.horvat@example.com",
    "appInstallationId": null
  },
  "kind": "employee_eid",
  "documentFileId": null,
  "validFrom": "2026-01-01T00:00:00.000Z",
  "validTo": "2027-12-31T23:00:00.000Z",
  "portals": ["Croatian Tax Administration OSS portal (ePorezna)"],
  "accessNotes": {
    "method": "eid",
    "renewalDueAt": "2027-11-30T23:00:00.000Z",
    "notes": "Ana signs in with her personal eID card."
  },
  "status": "active",
  "revokedAt": null,
  "revocationReason": null,
  "createdAt": "2026-01-05T10:00:00.000Z",
  "updatedAt": "2026-01-05T10:00:00.000Z",
  "version": 1
}

Errors

CodeHTTP statusWhenWhat to do
resource_not_found404No authorization with this ID for this entity in this mode.Check the ID and that your credentials are scoped to the right organization, entity, brand and mode.
scope_required400The request names no legal entity.Call the operation with credentials or a target at its level: an organization, a legal entity, a brand or the platform (details.required_scope).
permission_denied403You can't see this entity's tasks and authorizations.Ask an organization owner or admin for a role or scope that allows this action.

It can also return these common errors: validation_failed, api_version_unsupported, authentication_required, api_key_invalid, dry_run_not_supported, rate_limited, internal_error.