GST Compliance – Manage API Access

Manage API Access on GST Portal

Edition: September 2025
Disclaimer: This manual is for compliance facilitation. It does not substitute statutory provisions, notifications, or circulars. Taxpayers must verify with GSTN and ASP/GSP providers before activating API access.

✍️ Preface

The GST Portal provides a secure facility for taxpayers to enable or disable API access for third-party software such as Application Service Providers (ASPs) and GST Suvidha Providers (GSPs). This ensures data security and controlled integration for filing returns, reconciliation, and compliance automation.

This manual consolidates the law basis, step-by-step activation/deactivation process, session duration rules, FAQs with statutory basis, and a compliance checklist.

📑 Table of Contents

1. Law Basis & Purpose of API Access

2. Step-by-Step Process to Manage API Access

3. Session Duration Options

4. Security Features & Termination

5. FAQs (with Basis)

6. Compliance Checklist (Fillable Format)

⚖️ 1. Law Basis & Purpose of API Access

• Section 168, CGST Act, 2017 – Empowering CBIC to issue instructions.

• GSTN Guidelines – Taxpayers can authorize ASPs/GSPs to securely access GST Portal using APIs.

Purpose:

• Allow third-party ASP/GSP software to perform GST activities such as return filing, ledger tracking, and reconciliation.

• Provide taxpayers full control over access, duration, and revocation.

🛠️ 2. Step-by-Step Process to Manage API Access

As per GST Portal Manual:

1. Login to www.gst.gov.in.

2. Go to My Profile section.

3. From the Quick Links panel, select Manage API Access.

4. Choose Yes to enable API access.

5. A Duration drop-down will appear.

6. Select the desired duration (6 hours to 30 days).

7. Click Confirm.

8. To disable API access, select No and confirm.

📌 3. Session Duration Options

• Minimum: 6 hours.

• Maximum: 30 days.

• During the chosen period, no OTP is required for repeated authentications by ASP/GSP.

• Taxpayers can select shorter or longer sessions depending on integration needs.

📌 4. Security Features & Termination

• Taxpayers can terminate session anytime by selecting No in “Enable API Request”.

• A new session can be started anytime with a fresh duration.

• Prevents unauthorized access of taxpayer data by controlling ASP/GSP usage.

❓ 5. FAQs (with Basis)

Q1. What is API Access Permission and why is it needed?
It allows ASP/GSP applications to access GST data for compliance tasks. It is a security feature controlled by taxpayers. (FAQ 1)

Q2. Why is my GSP/ASP unable to access GST Portal?
API session not enabled or duration expired. (FAQ 2)

Q3. What is the minimum and maximum duration for API sessions?
Minimum 6 hours, maximum 30 days. (FAQ 3)

Q4. Can I terminate API session before expiry?
Yes, by disabling API access in My Profile. (FAQ 4)

✅ 6. Compliance Checklist (Fillable Format)