Get ITR Data

API reference

curl -X POST "https://__mock__/verification/v2/itr/get_data" \  -H "AccessToken: string" \  -H "Content-Type: application/json" \  -d '{}'

{
  "itr_data": {}
}

{
  "detail": {},
  "message": "string"
}

{
  "detail": {},
  "message": "string"
}

{
  "error": "string"
}

Overview

Call POST /verification/v2/itr/get_data from your backend after the user has completed the Get OTP step and your integration holds a valid ITR session token. You send:

1. Authorization: Bearer <token> for the Verification API.
2. AccessToken header with the ITR portal session token for this user (not the DigiLocker token).
3. JSON body with pan and otp when your flow requires them, as described in OpenAPI.

On 200 OK, the body includes itr_data (object). Treat the payload as sensitive tax information and store it under your compliance controls.

Key features

• Latest filing snapshot: Returns current ITR data available for the session.
• Server-side only: Keep the Bearer token and AccessToken off public clients.
• Pairs with OTP flow: Use after Get OTP succeeds for the same PAN.

Implementation

Prerequisites

1. Valid Verification API Bearer token.
2. Active ITR AccessToken from the portal flow driven by Get OTP.

Step 1: Call from your backend

POST /verification/v2/itr/get_data HTTP/1.1
Host: <verification-api-base-url>
Authorization: Bearer <token>
AccessToken: <itr-session-token>
Content-Type: application/json

{
  "pan": "ABCDE1234F",
  "otp": "<otp-if-required>"
}

Step 2: Use the response

Read itr_data and map fields into your product. Do not log full JSON in plain text.

Step 3: End the session when done

Call Logout ITR session when the user is finished so the portal session is cleared.

Error handling

Security notes

• Never send the Verification API Bearer token from a browser or untrusted app.
• Treat AccessToken and itr_data as highly sensitive.

Benefits

• Automates ITR retrieval for onboarding or underwriting after user consent.
• Clear pairing with the OTP and logout endpoints for a full session lifecycle.

Next steps

• Get OTP
• Get ITR data for assessment year
• Logout ITR session
• Verification API index