{
  "info": {
    "_postman_id": "1886f191-b452-4e7a-a04a-278c4561de87",
    "name": "VAT Validation API v1 — IBAN.com",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "description": "Generated from https://developer.iban.com/assets/openapi/vat-validation-api-v1.yaml (OpenAPI 3.1). Fill the collection variable apiKey with your key from API Access. Every 200 and 422 uses one query from the VAT Suite balance; there is no sandbox."
  },
  "item": [
    {
      "name": "VAT",
      "description": "VAT number validation against the national registries.",
      "item": [
        {
          "name": "Validate a VAT number (POST)",
          "id": "c8ee276d-4e27-4d05-8eaf-a155789b15e8",
          "request": {
            "name": "Validate a VAT number (POST)",
            "description": {
              "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
              "type": "text/plain"
            },
            "url": {
              "raw": "{{baseUrl}}/validate/",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "validate",
                ""
              ]
            },
            "header": [
              {
                "key": "Content-Type",
                "value": "application/x-www-form-urlencoded"
              }
            ],
            "method": "POST",
            "auth": null,
            "body": {
              "mode": "urlencoded",
              "urlencoded": [
                {
                  "key": "api_key",
                  "value": "{{apiKey}}",
                  "description": "Your personal key, shown under API Access in the client area."
                },
                {
                  "key": "vat",
                  "value": "FR64443061841",
                  "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                }
              ]
            }
          },
          "response": [
            {
              "name": "HTTP 200 · FR64443061841 — registered, Google France (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR64443061841",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"FR64443061841\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:39\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"EURL GOOGLE FRANCE\",\n    \"address\": \"8 RUE DE LONDRES\",\n    \"city\": \"PARIS\",\n    \"zip\": \"75009\",\n    \"country_iso\": \"FR\",\n    \"country_name\": \"France\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · FR14999999999 — well-formed, not registered (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR14999999999",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"FR14999999999\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:59:46\"\n  },\n  \"valid\": true,\n  \"active\": false,\n  \"registration_data\": {},\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · BE 0567.647.463 — separators removed (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "BE 0567.647.463",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"BE0567647463\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:40\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"BVBA Waowdeals.be\",\n    \"address\": \"Uitbreidingstraat 84\",\n    \"city\": \"Antwerpen\",\n    \"zip\": \"2600\",\n    \"country_iso\": \"BE\",\n    \"country_name\": \"Belgium\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · EL094014201 — Greece with the EL prefix (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "EL094014201",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"EL094014201\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:47:12\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"ΤΡΑΠΕΖΑ ΕΘΝΙΚΗ ΤΗΣ ΕΛΛΑΔΟΣ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ\",\n    \"address\": \"eolou 86\",\n    \"city\": \"athina\",\n    \"zip\": \"10559\",\n    \"country_iso\": \"GR\",\n    \"country_name\": \"Greece\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · XI220430231 — Northern Ireland (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "XI220430231",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"XI220430231\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:47:15\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"TESCO PLC\",\n    \"address\": \"\",\n    \"city\": \"\",\n    \"zip\": \"CIRRUS A SHIRE PARK KESTREL WAY WELWYN GARDEN CITY   AL7 1GA\",\n    \"country_iso\": \"GB\",\n    \"country_name\": \"United Kingdom\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 422 · FR64443061842 — wrong check digit, code 604 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR64443061842",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "Unprocessable Entity",
              "code": 422,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"FR64443061842\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:32\"\n  },\n  \"valid\": false,\n  \"active\": false,\n  \"registration_data\": {},\n  \"error\": {\n    \"code\": 604,\n    \"text\": \"Invalid VAT format, length, structure or check digit.\"\n  }\n}"
            },
            {
              "name": "HTTP 422 · US123456789 — country not supported, code 602 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "US123456789",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "Unprocessable Entity",
              "code": 422,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"US123456789\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:31\"\n  },\n  \"valid\": false,\n  \"active\": false,\n  \"registration_data\": {},\n  \"error\": {\n    \"code\": 602,\n    \"text\": \"Country code not supported.\"\n  }\n}"
            },
            {
              "name": "HTTP 400 · vat missing — code 307 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "Bad Request",
              "code": 400,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"error\": {\n    \"code\": \"307\",\n    \"message\": \"Bad Request: Missing 'vat' parameter value\"\n  }\n}"
            },
            {
              "name": "HTTP 403 · Wrong key — code 301 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (POST)",
                "description": {
                  "content": "Parameters as an `application/x-www-form-urlencoded` body, the key included. JSON request bodies are\nnot read (result code 306). Preferred in production: the key travels in the request body instead of the\nURL. Allow at least 30 s before timing out: some national registries are slow.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ]
                },
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/x-www-form-urlencoded"
                  }
                ],
                "method": "POST",
                "auth": null,
                "body": {
                  "mode": "urlencoded",
                  "urlencoded": [
                    {
                      "key": "api_key",
                      "value": "WRONG_KEY",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR64443061841",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                }
              },
              "status": "Forbidden",
              "code": 403,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"error\": {\n    \"code\": \"301\",\n    \"message\": \"API Key is invalid\"\n  }\n}"
            }
          ],
          "event": [],
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          }
        },
        {
          "name": "Validate a VAT number (GET)",
          "id": "e41e5a0f-5e45-44a0-8e73-9c8bde34d946",
          "request": {
            "name": "Validate a VAT number (GET)",
            "description": {
              "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
              "type": "text/plain"
            },
            "url": {
              "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=FR64443061841",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "validate",
                ""
              ],
              "query": [
                {
                  "key": "api_key",
                  "value": "{{apiKey}}",
                  "description": "Your personal key, shown under API Access in the client area."
                },
                {
                  "key": "vat",
                  "value": "FR64443061841",
                  "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                }
              ]
            },
            "header": [],
            "method": "GET",
            "auth": null
          },
          "response": [
            {
              "name": "HTTP 200 · FR64443061841 — registered, Google France (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=FR64443061841",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR64443061841",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"FR64443061841\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:39\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"EURL GOOGLE FRANCE\",\n    \"address\": \"8 RUE DE LONDRES\",\n    \"city\": \"PARIS\",\n    \"zip\": \"75009\",\n    \"country_iso\": \"FR\",\n    \"country_name\": \"France\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · FR14999999999 — well-formed, not registered (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=FR14999999999",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR14999999999",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"FR14999999999\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:59:46\"\n  },\n  \"valid\": true,\n  \"active\": false,\n  \"registration_data\": {},\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · BE 0567.647.463 — separators removed (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=BE 0567.647.463",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "BE 0567.647.463",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"BE0567647463\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:40\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"BVBA Waowdeals.be\",\n    \"address\": \"Uitbreidingstraat 84\",\n    \"city\": \"Antwerpen\",\n    \"zip\": \"2600\",\n    \"country_iso\": \"BE\",\n    \"country_name\": \"Belgium\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · EL094014201 — Greece with the EL prefix (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=EL094014201",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "EL094014201",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"EL094014201\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:47:12\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"ΤΡΑΠΕΖΑ ΕΘΝΙΚΗ ΤΗΣ ΕΛΛΑΔΟΣ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ\",\n    \"address\": \"eolou 86\",\n    \"city\": \"athina\",\n    \"zip\": \"10559\",\n    \"country_iso\": \"GR\",\n    \"country_name\": \"Greece\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 200 · XI220430231 — Northern Ireland (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=XI220430231",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "XI220430231",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"XI220430231\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:47:15\"\n  },\n  \"valid\": true,\n  \"active\": true,\n  \"registration_data\": {\n    \"name\": \"TESCO PLC\",\n    \"address\": \"\",\n    \"city\": \"\",\n    \"zip\": \"CIRRUS A SHIRE PARK KESTREL WAY WELWYN GARDEN CITY   AL7 1GA\",\n    \"country_iso\": \"GB\",\n    \"country_name\": \"United Kingdom\"\n  },\n  \"error\": {}\n}"
            },
            {
              "name": "HTTP 422 · FR64443061842 — wrong check digit, code 604 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=FR64443061842",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR64443061842",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "Unprocessable Entity",
              "code": 422,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"FR64443061842\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:32\"\n  },\n  \"valid\": false,\n  \"active\": false,\n  \"registration_data\": {},\n  \"error\": {\n    \"code\": 604,\n    \"text\": \"Invalid VAT format, length, structure or check digit.\"\n  }\n}"
            },
            {
              "name": "HTTP 422 · US123456789 — country not supported, code 602 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=US123456789",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "US123456789",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "Unprocessable Entity",
              "code": 422,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"query\": {\n    \"vat\": \"US123456789\",\n    \"status\": \"completed\",\n    \"request_time\": \"2026-10-09 07:46:31\"\n  },\n  \"valid\": false,\n  \"active\": false,\n  \"registration_data\": {},\n  \"error\": {\n    \"code\": 602,\n    \"text\": \"Country code not supported.\"\n  }\n}"
            },
            {
              "name": "HTTP 400 · vat missing — code 307 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key={{apiKey}}&vat=",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "{{apiKey}}",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "Bad Request",
              "code": 400,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"error\": {\n    \"code\": \"307\",\n    \"message\": \"Bad Request: Missing 'vat' parameter value\"\n  }\n}"
            },
            {
              "name": "HTTP 403 · Wrong key — code 301 (recorded 9 Oct 2026)",
              "originalRequest": {
                "name": "Validate a VAT number (GET)",
                "description": {
                  "content": "The same parameters in the query string, the key included (`api_key`). With GET the key is part of the\nURL and ends up in proxy and web-server access logs: use POST in production.",
                  "type": "text/plain"
                },
                "url": {
                  "raw": "{{baseUrl}}/validate/?api_key=WRONG_KEY&vat=FR64443061841",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "validate",
                    ""
                  ],
                  "query": [
                    {
                      "key": "api_key",
                      "value": "WRONG_KEY",
                      "description": "Your personal key, shown under API Access in the client area."
                    },
                    {
                      "key": "vat",
                      "value": "FR64443061841",
                      "description": "The VAT number to check, **with its country prefix** (`FR64443061841`). Upper or lower case; spaces,\nfull stops and hyphens are removed before the check (`BE 0567.647.463` → `BE0567647463`). Any other\ncharacter gives result code 601. Missing: HTTP 400, code 307; empty or shorter than 4 characters: HTTP\n422, code 603. Greece is sent as `EL` (the ISO code `GR` is refused with 602), Northern Ireland as `XI`."
                    }
                  ]
                },
                "header": [],
                "method": "GET",
                "auth": null
              },
              "status": "Forbidden",
              "code": 403,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "body": "{\n  \"error\": {\n    \"code\": \"301\",\n    \"message\": \"API Key is invalid\"\n  }\n}"
            }
          ],
          "event": []
        }
      ],
      "event": []
    }
  ],
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://api.bav.com",
      "type": "string"
    },
    {
      "key": "apiKey",
      "value": "",
      "type": "string"
    }
  ]
}