POST /gst/v1/gst-info.1). Everything a business files under that GSTIN, and everything its
suppliers file about it, is read from the GST portal with the taxpayer’s consent, given as an OTP the
portal sends them.
How the taxpayer consents
1
The taxpayer enables API access
On the GST portal, under My Profile > Manage API Access, the taxpayer allows API requests and
chooses how long they stay allowed. Without it the portal sends no OTP.
2
Send the GSTIN and the portal username
The GST portal sends an OTP to the mobile number and email address registered on the GSTIN.
3
Submit the OTP the taxpayer received
The portal opens a session on the taxpayer’s behalf, and every read below is made within it.
What can be read
GSTR-1 and GSTR-1A: what the business sold
The summary of the return, and each of its tables on its own:
Each table can also be read as amended in a later period (B2BA, CDNRA and the rest). GSTR-1A, the
amendment return, holds the same tables.
