Authentication & Security

Transport Security

All SAM RefData API endpoints are served exclusively over HTTPS (port 443). Plain HTTP on port 80 is disabled across every endpoint.

https://<host>/rest/refdata/…

Authentication

The RefData APIs documented here are public reference-data endpoints — they do not require bearer tokens or API keys. However, some endpoints (such as validateEmailDomain) may be rate-limited in the future.

WARNING

Even though these endpoints do not require authentication, always use HTTPS to prevent man-in-the-middle attacks and ensure data integrity.

Error Responses

When a request fails, the API returns one of the following exception types:

WSInvalidParameterException

Returned when a required parameter is missing, empty, or has an invalid value.

WSRefDataServiceException

A general-purpose service error indicating something went wrong while fetching reference data.

WSInvalidEmailDomainNameException

Specific to the validateEmailDomain endpoint — returned when the email domain fails DNS MX lookup validation.