Scoped permissions and subscriptions
4 min read Updated October 22, 2026
Subscriptions are the permissions
Each credential is subscribed to specific APIs (called slugs), separately for sandbox and production. A request to an API you are not subscribed to returns 403 not_subscribed, with apiSlug and environment in the body.
API slugs
| Slug | URL prefix |
|---|---|
| `compliance` | `/v1/compliance`, `/v1/screenings`, `/v1/monitoring`, `/v1/parts` |
| `hs-lookup` | `/v1/hs` |
| `aes-filing` | `/v1/aes` |
| `tariffs` | `/v1/tariffs` |
| `risk` | `/v1/risk` |
| `shipping-documents` | `/api/v1` |
| `firearms` | `/v1/firearms` |
| `pharma` | `/v1/pharma` |
| `financial` | `/v1/financial` |
| `aviation` | `/v1/aviation` |
| `business` | `/v1/business` |
| `legal` | `/v1/legal` |
| `maritime` | `/v1/maritime` |
| `fcc` | `/v1/fcc` |
| `ai-assistant` | `/v1/ai` |
Managing subscriptions
Use Dashboard → Developer → Subscriptions (or POST /v1/developer/subscriptions with apiSlug and environment). Subscriptions are checked on every request, so a change applies immediately.
Organizations
Credentials belong to your organization; its members share the same keys and subscriptions.
Least privilege
Subscribe only to the APIs you use. A credential subscribed only to HS Code Lookup cannot reach screening or financial data.
Was this article helpful?