VATlayer Getting Started: API Keys and First Request (2026)

Getting started overview

Integrating VATlayer involves a sequence of steps designed to enable developers to quickly validate VAT numbers and retrieve VAT rates. The process typically begins with account creation, followed by the acquisition of an API access key, which authenticates requests. Developers then construct and send HTTP GET requests to the VATlayer API endpoints, receiving responses in JSON format. The API supports various programming languages through documented examples and SDKs, simplifying the integration for tasks such as e-commerce VAT compliance or financial software accuracy.

The core functionality of VATlayer revolves around two primary services: validating European Union (EU) VAT numbers for authenticity and retrieving current VAT rates for specific countries. These services are critical for businesses operating within or with the EU, ensuring compliance with tax regulations and accurate transaction processing. The API's RESTful design aligns with standard web service interaction patterns, making it accessible to developers familiar with HTTP requests and JSON parsing.

Quick reference table

This table outlines the essential steps for getting started with VATlayer:

Create an account and get keys

To begin using VATlayer, an account registration is required. This process typically involves providing an email address and creating a password. Upon successful registration, users gain access to their personal VATlayer dashboard. From this dashboard, the unique API Access Key can be retrieved. This key is essential for authenticating all API requests and is provided as a URL parameter in each call.

VATlayer offers a free tier that includes 100 API requests per month, allowing developers to test the service without an initial financial commitment. For increased request volumes or advanced features, paid subscription plans are available, starting at $9.99 per month for 2,500 requests. Details on these plans and their associated features are available on the VATlayer pricing page.

The API key acts as a unique identifier for your application and should be kept secure. Best practices for API key management, such as avoiding hardcoding keys directly into client-side code and using environment variables or secure configuration management, are recommended to prevent unauthorized access. For server-side applications, securing the environment where the key is stored is paramount.

Your first request

After obtaining your API Access Key, you can make your first API request to VATlayer. The primary endpoints include VAT number validation and VAT rate lookup. All requests are made via HTTP GET and require your access_key as a URL parameter. The base URL for the API is https://apilayer.net/api/.

VAT number validation endpoint

To validate a VAT number, you will use the validate endpoint. This endpoint requires the VAT number as a parameter. For example, to validate a UK VAT number, the request would look like this:

GET https://apilayer.net/api/validate?access_key=YOUR_ACCESS_KEY&vat_number=GB888888888

Replace YOUR_ACCESS_KEY with your actual API key and GB888888888 with the VAT number you wish to validate. The response will be a JSON object indicating the validity of the number, along with other relevant information such as company name and address, if available. For a full list of request parameters and expected responses, refer to the VATlayer validation API documentation.

Example: PHP

Using PHP, you can make a request to the validation endpoint:

<?php
$ch = curl_init('https://apilayer.net/api/validate?access_key=YOUR_ACCESS_KEY&vat_number=GB888888888');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

$json = curl_exec($ch);
curl_close($ch);

$validationResult = json_decode($json, true);

var_dump($validationResult);
?>

Example: Python

In Python, the requests library can be used:

import requests

params = {
  'access_key': 'YOUR_ACCESS_KEY',
  'vat_number': 'GB888888888'
}

response = requests.get('https://apilayer.net/api/validate', params=params)
validation_result = response.json()

print(validation_result)

VAT rate lookup endpoint

To retrieve VAT rates, you will use the rates endpoint. This endpoint does not require a specific VAT number but can be filtered by country. If no country is specified, it returns rates for all supported countries. For example, to get VAT rates for Germany:

GET https://apilayer.net/api/rates?access_key=YOUR_ACCESS_KEY&country_code=DE

The response will provide a JSON object containing standard, reduced, and super reduced VAT rates for the specified country. Consult the VATlayer rates API documentation for more options, such as filtering by specific rate types.

Common next steps

After successfully making your first API calls, consider these common next steps for further integration and robust usage:

1. Error Handling: Implement comprehensive error handling in your application. The VATlayer API returns specific error codes and messages in its JSON responses. Properly handling these errors ensures your application can gracefully manage invalid VAT numbers, rate limits, or authentication issues. Review the VATlayer error codes documentation for details.

2. Rate Limiting: Be aware of the API request limits associated with your subscription plan (e.g., 100 requests/month for the free tier). Implement mechanisms to manage your request frequency, such as client-side rate limiting or caching results for frequently accessed VAT numbers or rates, to avoid hitting limits and ensure uninterrupted service. Information on rate limits is available on the VATlayer pricing page.

3. SDK Integration: If you are working with a supported language (PHP, Python, jQuery, Go, Ruby), consider utilizing the official SDKs. These SDKs often abstract away the complexities of HTTP requests and JSON parsing, providing an object-oriented interface for interacting with the API, which can accelerate development. The VATlayer documentation provides SDK examples.

4. Webhook Integration (if applicable): While VATlayer primarily operates via direct API calls, investigate if your use case could benefit from webhooks for asynchronous notifications or data updates. Many APIs, like Stripe's webhook system, offer this functionality for event-driven architectures. Check the VATlayer documentation for any webhook support.

5. Advanced Features: Explore additional parameters and features documented in the VATlayer API reference. This might include specifying different rate types (e.g., reduced rates) or requesting specific country data to refine your integration.

6. Security Best Practices: Beyond key security, ensure that any data sent to or received from VATlayer is handled in compliance with relevant data protection regulations, such as GDPR, especially when dealing with company information obtained during validation. Guidance on secure API usage can be found in general cloud security best practices.

Troubleshooting the first call

When encountering issues with your initial API calls to VATlayer, consider the following common troubleshooting steps:

1. Incorrect API Key: The most frequent issue is an incorrect or expired access_key. Double-check that you have copied the key accurately from your VATlayer dashboard and that it is included as a URL parameter in your request. An invalid key will result in an authentication error.

2. Endpoint or Parameter Errors: Verify that the API endpoint (e.g., /validate, /rates) is correctly specified and that all required parameters (e.g., vat_number, country_code) are present and correctly formatted. Typographical errors in parameter names or values can lead to unexpected responses or error messages. Refer to the VATlayer API reference for exact parameter names.

3. Rate Limit Exceeded: If you are on the free tier or have exceeded your subscription's request limit, the API will return a rate limit error. Check your usage statistics in the VATlayer dashboard and consider upgrading your plan or waiting for the limit to reset. Details on limits are on the VATlayer pricing page.

4. Network Connectivity Issues: Ensure that your application or development environment has stable internet connectivity and is not blocked by a firewall or proxy that prevents outgoing HTTP requests to apilayer.net. You can test basic connectivity by attempting to access the VATlayer documentation from your environment.

5. JSON Parsing Errors: If the API call appears successful but your application cannot process the response, the issue might be with parsing the JSON output. Use a JSON validator tool to inspect the raw API response and confirm it is valid JSON. Ensure your parser is correctly handling potential null values or unexpected data types.

6. HTTP Status Codes: Pay attention to the HTTP status codes returned with the API response. Common codes to look for include:

   • 200 OK: Request successful.
   • 401 Unauthorized: Typically indicates an invalid or missing API key.
   • 403 Forbidden: Access to the resource is denied (e.g., rate limit exceeded).
   • 400 Bad Request: Often due to missing or malformed parameters.
   • 5xx Server Error: Indicates an issue on the VATlayer server side, which should be reported if persistent.

7. Consult Documentation and Support: If issues persist, thoroughly review the VATlayer official documentation, especially the sections on error codes and examples. If you cannot find a solution, contact VATlayer support with your API key, the exact request you're making, and the full error response you're receiving.