Getting started
The Data API serves ATF FFL licensee data and a multi-distributor firearms catalog over JSON/HTTPS.
Base URL: https://api.oldsteelarsenal.com
1. Get credentials
Section titled “1. Get credentials”Access is by application — request access. We issue a client id and a secret, plus the scopes your agreement covers:
| Scope | Gives you |
|---|---|
ffl:read |
/v1/ffl/search, /v1/ffl/{license} — national licensee listing |
ffl:verify |
/v1/ffl/{license}/verify — live check against ATF eZ Check |
catalog:read |
/v1/catalog/* — products, offers, facets, changes, inventory and cost history |
Keep the secret server-side. Never ship it in a browser or mobile app.
2. Sign every request
Section titled “2. Sign every request”Every /v1/* call carries three headers computed with your secret — see Authentication.
3. Call an endpoint
Section titled “3. Call an endpoint”The full list, with request and response schemas, is in the API reference.
Sync, don’t poll
Section titled “Sync, don’t poll”Catalog endpoints expose a change cursor: fetch once, then ask only for what changed since your last cursor. Cursors never expire.