> ## Documentation Index
> Fetch the complete documentation index at: https://developer.sandbox.co.in/llms.txt
> Use this file to discover all available pages before exploring further.

# Quickstart

> Learn how to authenticate and make your first API call to Sandbox APIs in minutes.

This guide shows you how to authenticate and make your first API call to Sandbox. You'll generate API credentials, get an access token, and call an endpoint.

> [!NOTE]
>
> **Prerequisites**: You need a Sandbox account. [Sign up here](https://accounts.sandbox.co.in/signup) if you don't have one.

## Send your first API request

**1. Get your API credentials**

Navigate to [Sandbox Console](https://console.sandbox.co.in) and go to **Settings** → **API Keys** to retrieve your API Key and API Secret. Sandbox provides separate credentials for test and production [environments](https://developer.sandbox.co.in/guides/developer-resources/environments.md).

Follow this guide to generate your keys: [Generate your API Keys](https://help.sandbox.co.in/portal/en/kb/articles/generate-your-api-keys).

> [!WARNING]
>
> Save your API key and secret immediately when they appear—you won't be able to view the secret again.

**2. Authenticate to get an access token**

Use the [Authenticate API](https://developer.sandbox.co.in/api-reference/authenticate.md) to generate an access token. Pass your API Key and API Secret in the request headers.

```bash cURL theme={null}
curl -X POST 'https://api.sandbox.co.in/authenticate' \
     -H 'x-api-key: YOUR_API_KEY' \
     -H 'x-api-secret: YOUR_API_SECRET' \
     -H 'x-api-version: 1.0.0' \
     -H 'Content-Type: application/json'
```

**Response**

```json theme={null}
{
  "code": 200,
  "data": {
    "access_token": "eyJ0eXAiOiJKV1QiLCJhbGc..."
  },
  "timestamp": 1750687659809,
  "transaction_id": "3a31716a-6a4d-4670-83fe-849d8209e35a"
}
```

> [!NOTE]
>
> Access tokens are valid for 24 hours. Regenerate a new token when it expires.

**3. Make your first API call**

Use your access token to call any Sandbox API. This example searches for GST information using a GSTIN.

**Headers**

**x-api-key** `string` *required*

Your API Key from the Sandbox Console

**authorization** `string` *required*

Your access token (without "Bearer" prefix)

**x-api-version** `string`

API version (e.g., "1.0")

```bash cURL theme={null}
curl -X POST 'https://api.sandbox.co.in/gst/compliance/public/gstin/search' \
     -H 'x-api-key: YOUR_API_KEY' \
     -H 'authorization: eyJ0eXAiOiJKV1QiLCJhbGc...' \
     -H 'x-api-version: 1.0' \
     -H 'Content-Type: application/json' \
     -d '{
       "gstin": "05ABNTY3290P8ZB"
     }'
```

> [!WARNING]
>
> Don't include "Bearer" prefix in the authorization header. Pass only the access token value.

> [!TIP]
>
> You are all set to use Sandbox APIs

## Next steps

> **[Error handling](https://developer.sandbox.co.in/guides/developer-resources/errors.md)**
>
> Understand error codes and how to handle them

> **[Rate limits](https://developer.sandbox.co.in/guides/developer-resources/rate_limits.md)**
>
> Learn about API rate limits and best practices

> **[Webhooks](https://developer.sandbox.co.in/guides/developer-resources/webhooks.md)**
>
> Set up webhooks for real-time notifications

> **[Test environment](https://developer.sandbox.co.in/guides/developer-resources/test_environment.md)**
>
> Set up Postman collections and run test requests


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.