Sent as Authorization: Bearer … on every FBR call. The token itself decides Sandbox vs Production routing.
Official flow (PRAL DI API v1.12): register in IRIS → PRAL issues a security token + API URLs → paste the token here → Test → submit invoices. There is no login/token endpoint — the token goes directly in the request header.
🌐 API endpoints
🛠 Endpoint URLs (advanced — official PRAL defaults)
Only change these if PRAL gives you different URLs. Saved with the Save button.
📚 Reference data
📜 Activity log (FBR + invoices)
🏢 Business profile (seller)
🧮 Tax defaults
Important: GST / further-tax rates change via SROs. Before go-live, sync rates from the PRAL Reference Data API and confirm with your tax consultant.