Create a sandbox key
Create a test Client ID and Secret in the developer console.
Developer console →Connect verified entity and officer data from Singapore BizFile and Malaysia MYCOID (CRS) through one secure, consistent REST API.
/v1/sg/entities/202612345N200 · 428ms{
"data": {
"uen": "202612345N",
"name": "LETTAGA DEMO PTE. LTD.",
"entity_type": "PRIVATE_COMPANY_LIMITED_BY_SHARES",
"status": "LIVE",
"incorporation_date": "2026-01-10",
"registered_address": {
"street": "1 RAFFLES PLACE",
"postal_code": "048616",
"country": "SINGAPORE"
}
},
"request_id": "req_01SGA91"
}QUICK START
LETTAGA manages each registry connection. You only manage your API credentials and the company identifier.
Create a test Client ID and Secret in the developer console.
Developer console →Use OAuth 2.0 Client Credentials to issue a short-lived token.
POST /oauth/tokenChoose a jurisdiction and retrieve original entity and officer data.
GET /v1/:country/entities/:idcurl --request GET \
--url https://sandbox-api.lettaga.ai/v1/sg/entities/202612345N \
--header 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
--header 'X-Language: en-GB'API REFERENCE
Country-specific resources prevent identifier ambiguity. All responses are JSON and encrypted in transit.
Retrieve the entity's original registry profile.
/v1/sg/entities/{uen}uenrequiredUEN for Singapore BizFile or registration number for Malaysia MYCOID (CRS).
sg:entities:readApproved subscriptions and scopes return unmasked registry data, including officer identifiers. Response bodies are never written to application logs.
{
"data": {
"uen": "202612345N",
"name": "LETTAGA DEMO PTE. LTD.",
"entity_type": "PRIVATE_COMPANY_LIMITED_BY_SHARES",
"status": "LIVE",
"incorporation_date": "2026-01-10",
"registered_address": {
"street": "1 RAFFLES PLACE",
"postal_code": "048616",
"country": "SINGAPORE"
}
},
"request_id": "req_01SGA91"
}SECURITY BY DEFAULT
LETTAGA does not alter registry values. Encryption, authentication, authorisation and audit controls protect every request.
Security →TLS 1.2 or higher protects external and internal traffic.
Entitlements are checked for every customer and API key.
Every resource access is recorded with actor and time.
Unmasked personal data is excluded from application logs.