Look an EIN up
POST
/nonprofits/lookup
Add flow step 1 (requireVerifiedEmail; 20 per hour per person). The six outcomes, first match wins: existing, revoked, verified, manual_review (church, group, private_foundation), not_eligible, not_found.
Authorizations
BearerAuth
In the browser, authentication rides on the httpOnly session cookies set by /cognito/signin or the Google / Apple sign-in at /cognito/oauth/{provider}. For scripts and for Swagger UI testing, paste an API key (fh_live_…, created with POST /api-keys); a Cognito JWT is accepted too. Sign-in does not return a token in its body.
Type
HTTP (bearer)
Request Body
application/json
JSON
{
"ein": "12-3456789"
}
Responses
OK
application/json
JSON
"string"