Our APIs have 3 types of endpoint. Each endpoint has its own:
- access level
- authorisation token
- authorisation procedure
These are dependent on the data that's served.
|Endpoint access level||Required authorisation token|
|Open access||No token|
HMRC APIs are only accessible over Transport Layer Security (TLS, that is https://). We require that new applications support TLS 1.2 or higher to avoid known weaknesses in previous versions. You should upgrade your existing applications by 1 October 2019 when we will remove support for previous versions.