https://app.taxhomebase.com/api/v1/.
Base URL
Authentication
All endpoints (except health check and Stripe webhook) require a valid JWT access token from AWS Cognito. Pass it in theAuthorization header:
Key Concepts
Soft Deletes
Most resources use soft deletion. When youDELETE a resource, it’s marked as deleted but not removed from the database. Use the PATCH /:id/restore endpoint to undo a delete.
Year Filtering
Many list endpoints accept ayear query parameter (YYYY format) to filter results by year. When omitted, the current year is used as the default.
Plan Gating
Three endpoints require a Pro subscription:GET /tax-estimate— Full tax calculationsPOST /tax-calculate— Contract comparison calculationsGET /state-income— Multi-state income breakdown
403 Forbidden for free users.
Rate Limiting
API requests are rate-limited to 100 requests per minute per user in production (500 in development). The health check and Stripe webhook endpoints are exempt.Request IDs
Every response includes anX-Request-Id header containing a UUID. Include this ID when reporting issues for faster debugging.