Get your ZATCA and Fatoora records through an API

What you can build on the ZATCA portal

• List onboarded solutions and devices

  Build this

  Reads View List Of Solutions And Devices on the Fatoora portal: every onboarded EGS unit with its status and certificate dates.

  Takes

  Status (optional), certificate expiry before (optional)

  Returns

  Common name, serial number, VAT number, organization unit name, organization name, country, status, onboarding date, certificate expiry date, revocation date

• Get e-invoicing statistics

  Build this

  Reads E-invoicing Statistics on the Fatoora portal: documents sent for reporting and for clearance in the past 12 months, by outcome.

  Takes

  Nothing

  Returns

  For Reported and for Cleared: total, documents accepted, accepted with warnings, rejected

• List returns waiting to be filed

  Build this

  Clicks Returns in the side menu of login.zatca.gov.sa, selects the tax type and reads the returns listed for filing.

  Takes

  Tax type, such as VAT

  Returns

  Return name, period, status

• Request a Zakat certificate

  Build this

  On the Zakat tab, opens Request for certificate, selects New Request, fills in the form and submits it.

  Takes

  The certificate form's fields, as you give them

  Returns

  Whether the request went through, certificate details shown

Automate the ZATCA portal with a workflow

A workflow runs your methods as one process, with nobody at the screen. A schedule or a call from your own system starts it, the steps run in order, and the result arrives in your inbox or in the systems you already use.

• CSIDs that expire within 30 days

  Build this

  Starts

  Every Monday at 8:00, Riyadh time

  Step 1

  List the onboarded solutions and devices with status Active.

  Step 2

  Keep the devices whose certificate expiry date is within the next 30 days.

  Step 3

  Email you the list with common name, serial number, organization unit name and expiry date.

• Rejected e-invoice counts, posted when they change

  Build this

  Starts

  Every weekday at 9:00, Riyadh time

  Step 1

  Get the E-invoicing Statistics for Reported and Cleared.

  Step 2

  Keep the result only when the rejected count changed since the last run.

  Step 3

  Post the new counts for accepted, accepted with warnings and rejected to your webhook.

• VAT returns open for filing, every month

  Build this

  Starts

  On the 1st of every month at 9:00, Riyadh time

  Step 1

  List the returns under Returns for VAT.

  Step 2

  Keep the returns that were not there on the last run.

  Step 3

  Email you each one with its period and status.

You can run a workflow by hand on every plan, Free included. Schedules and webhook triggers come with the paid plans, from $29 a month.

Once built, one call from your code

Once you have built a method, it is one POST to /v1/runs from your backend, or a tool an AI agent calls over MCP. This is what “List onboarded solutions and devices” would look like.

curl https://api.fous.com/v1/runs \
  -H "Authorization: Bearer $FOUS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "method": "fatoora.zatca.gov.sa/list_solutions_and_devices",
    "input": {
      "status": "Active",
      "certificate_expiry_before": "2027-01-31"
    }
  }'

{
  "status": "completed",
  "data": {
    "devices": [
      {
        "common_name": "Acme-POS-Riyadh-01",
        "serial_number": "1-Acme|2-POS|3-7f3c21d0",
        "vat_number": "300000000000003",
        "organization_unit_name": "Riyadh Branch",
        "organization_name": "Acme Trading",
        "country": "SA",
        "status": "Active",
        "onboarding_date": "2025-01-14",
        "certificate_expiry_date": "2027-01-13",
        "revocation_date": null
      }
    ],
    "count": 1
  }
}

An example with invented data, not a ready-made endpoint. The method exists in your organization once you build it, and its name, inputs and fields follow your request.

The ZATCA portal’s own options

The APIs ZATCA publishes are for e-invoicing: onboarding an e-invoice generation solution (EGS) and sending invoices, credit and debit notes for clearance or reporting. They do not cover returns, payments, certificates or the lists in the Fatoora portal. Those are used by hand, on the website or in the Zatca app.

Read on November 12, 2026: Fatoora Portal User Manual, E-Services Interactive Guideline, Submit VAT Return.

Signing in to the ZATCA portal

Companies and establishments sign in to the ZATCA portal with a username and password, then a verification code sent by SMS to the mobile. The Fatoora portal takes your ERAD credentials: TIN or registered email, and password. With Fous you sign in through ZATCA's own sign-in with your own account. The login is sealed with AES-256 and never shown to code or AI agents.

Worth knowing

Two environments, onboarded separately

The Fatoora portal and the Fatoora simulation portal are independent. A device onboarded in one does not appear in the other, so a method reads one environment.

OTPs last 1 hour

Onboarding or renewing a CSID needs an OTP per EGS unit, generated in the Fatoora portal. Up to 100 can be generated in one request, and each is valid for 1 hour.

Revoking a CSID cannot be undone

Once you confirm a revocation, the device is no longer active and has to be onboarded again as a new device. Keep revocation out of any unattended workflow.

A certificate needs a clean record

A Zakat or tax certificate is issued only when there are no late returns or payments and no liabilities. The Immediate Certificate follows the Zakat return once the amount due is paid.

More in Government: Middle East and Africa

• CAC Company Registration Portal
• CIPC eServices
• GDRFA Dubai Smart Services
• eTIMS
• Rev360
• Qiwa
• ICP Smart Services
• KRA iTax
• SARS eFiling
• SIMPL
• Egyptian Tax Authority e-Services
• uFiling
• EmaraTax
• Mudad

Other industries: Prozorro, Guichet unique des formalités d'entreprises, Odyssey File & Serve, Barclays Mortgage Hub, EFTPS, SFS Vendor Portal.