openapi: 3.2.0 info: title: Avalara AvaTax E Commerce Token API description: Welcome to the AvaTax API Postman Collection! version: 1.0.0 servers: - url: http://{{baseurl}} security: - basicAuth: [] tags: - name: ECommerceToken paths: /api/v2/companies/{companyId}/ecommercetokens: post: tags: - ECommerceToken summary: Avalara CreateECommerceToken description: 'Creates a new eCommerce token. This API is used to create a new eCommerce token. An eCommerce token is required in order to launch the CertCapture eCommerce plugin. Create a token for each of your CertCapture customers. ### Security Policies * This API requires one of the following user roles: AccountAdmin, AccountOperator, AccountUser, BatchServiceAdmin, CompanyAdmin, CompanyUser, Compliance Root User, ComplianceAdmin, ComplianceUser, CSPAdmin, CSPTester, ECMAccountUser, ECMCompanyUser, FirmAdmin, FirmUser, ProStoresOperator, Registrar, SiteAdmin, SSTAdmin, SystemAdmin, TechnicalSupportAdmin, TechnicalSupportUser, TreasuryAdmin, TreasuryUser.' requestBody: content: application/json: schema: type: object example: customerNumber: '1' parameters: - name: Content-Type in: header schema: type: string example: application/json - name: X-Avalara-Client in: header schema: type: string description: Identifies the software you are using to call this API. For more information on the client header, see [Client Headers](https://developer.avalara.com/avatax/client-headers/). example: AvaTax Postman Collection - name: companyId in: path schema: type: string required: true responses: '200': description: Successful response content: application/json: {} operationId: postApiV2CompaniesByCompanyIdEcommercetokens x-operation-id-source: derived put: tags: - ECommerceToken summary: Avalara RefreshECommerceToken description: 'Refresh an eCommerce token. CertCapture eCommerce tokens expire after one hour. This API is used to refresh an eCommerce token that is about to expire. This API can only be used with active tokens. If your token has expired, you must generate a new one. ### Security Policies * This API requires one of the following user roles: AccountAdmin, AccountOperator, AccountUser, BatchServiceAdmin, CompanyAdmin, CompanyUser, Compliance Root User, ComplianceAdmin, ComplianceUser, CSPAdmin, CSPTester, ECMAccountUser, ECMCompanyUser, FirmAdmin, FirmUser, ProStoresOperator, Registrar, SiteAdmin, SSTAdmin, SystemAdmin, TechnicalSupportAdmin, TechnicalSupportUser, TreasuryAdmin, TreasuryUser.' requestBody: content: application/json: schema: type: object example: token: jwt token for gencert utility parameters: - name: Content-Type in: header schema: type: string example: application/json - name: X-Avalara-Client in: header schema: type: string description: Identifies the software you are using to call this API. For more information on the client header, see [Client Headers](https://developer.avalara.com/avatax/client-headers/). example: AvaTax Postman Collection - name: companyId in: path schema: type: string required: true responses: '200': description: Successful response content: application/json: {} operationId: putApiV2CompaniesByCompanyIdEcommercetokens x-operation-id-source: derived components: securitySchemes: basicAuth: type: http scheme: basic