Create an account on the portal, then go to My Applications to create an application. Your Application Secret is displayed at creation — copy it and keep it in a safe place. Once the application is approved, you can use it in your calls. See the getting started guide for more details.

The Sandbox environment (https://sandbox-api.stef.com) is dedicated to testing — no quotas, fictitious data. The Production environment (https://api.stef.com) uses real data with the quotas defined in your access plan.

OAuth 2.0 tokens expire after 1 hour. Request a new token via the /oauth2/token endpoint. We recommend implementing an automatic renewal mechanism (refresh token). See the authentication guide.

You have reached the request limit of your plan. Check the X-RateLimit-Remaining and Retry-After headers in the response and implement exponential backoff. See the best practices for rate limiting management.

Each API has a Try it mode on its documentation page on this portal. You can also export the OpenAPI specification and import it into Insomnia or Postman using the dedicated button.