POSTFetch GSTINs by PAN

Retrieve all GSTINs linked to a given PAN — with their state and status — in a single API call.

POST/tools/kyc/gstin-with-pan

The GSTIN with PAN API accepts a PAN (Permanent Account Number) and returns a list of all GSTIN registrations associated with that PAN across every Indian state and union territory. Each entry in the list includes the GSTIN, its active/inactive status, and the state of registration. Ideal for identifying all GST registrations of a counterparty, detecting multi-state business presence, and de-duplicating vendor or merchant records during onboarding.

Request

Body parameters

Field	Type	Required	Description
`initiator_id`	string	required	Registered mobile number of the API user (see Platform Credentials).e.g. 9962981729
`client_ref_id`	string	optional	Unique reference ID per API call, generated by your system (max 20 characters).e.g. 2026010100123456789
`pan`	string	required	10-character alphanumeric PAN of the business or individual (5 letters, 4 digits, 1 letter).e.g. ABCDE1234F

initiator_idstringRequired

Registered mobile number of the API user (see Platform Credentials).

example: 9962981729

client_ref_idstringoptional

Unique reference ID per API call, generated by your system (max 20 characters).

example: 2026010100123456789

panstringRequired

10-character alphanumeric PAN of the business or individual (5 letters, 4 digits, 1 letter).

example: ABCDE1234F

These headers authenticate and sign every request. See How Auth Works for details.

Field	Type	Required	Description
`developer_key`	string	required	Static API key issued to your account after KYC.
`secret-key`	string	required	Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).
`secret-key-timestamp`	string	required	Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.
`content-type`	string	required	application/jsone.g. application/json

developer_keystringRequired

Static API key issued to your account after KYC.

secret-keystringRequired

Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).

secret-key-timestampstringRequired

Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.

content-typestringRequired

application/json

example: application/json

Responses

statusnumber
Primary success indicator (0 = success).
messagestring
Human-readable response / error message.
response_status_idnumber
Granular status id; see the shared error-codes table.
response_type_idnumber
A unique id for every possible response shape (success or error) — useful for client logic branching and analytics.
dataobject
API-specific response payload.
- panstring
  The PAN submitted in the request, echoed back for reference.
- gstin_listarray
  List of all GSTIN registrations linked to the given PAN. Each element represents one GST registration across a state.
  - gstinstring
    A GSTIN number associated with the PAN.
  - statusstring
    Current registration status of this GSTIN (e.g. Active, Inactive, Cancelled).
  - statestring
    Indian state or union territory where this GSTIN is registered.

POSTFetch GSTINs by PAN

Request

Body parameters

Responses

Next steps

Related