Hi all,
I’m testing the Compliance CSID API in the ZATCA e-invoicing sandbox (/compliance). The API requires:
-
A valid CSR
-
A valid OTP
Problem:
-
Sandbox websites (fatoora.zatca.gov.sa, sandbox.zatca.gov.sa) are not working.
-
Cannot generate or receive a valid OTP, so API calls return
400 Bad Request.
Question:
-
How can I obtain a valid OTP for the Compliance CSID API?
-
Is there an alternative way to test the API while the sandbox is down?
I’ve followed the CSR format in the developer manual, but requests fail without a valid OTP.
Thanks in advance for any guidance!