Hi Shada,

Can you show your SurfaceController code ?

Maybe you have some restriction attibute ?

Thanks, Alex

Alex Skrypnyk, I have action "GetCatalogs" resolution for the role "CertifiedServiceCenters"

 public class ServiceCatalogsController : SurfaceController
     {
   [Authorize(Roles = "CertifiedServiceCenters")]
         [HttpGet]
         public JsonResult GetCatalogs()
         {  .....
          return Json(new { catalogs }, JsonRequestBehavior.AllowGet);
         }
 }

Delphi project:

function TFrmCatalogs.GetResponseByUrl(const url: string): string;
var
  lStream: TStringStream;
begin
  lStream := TStringStream.Create(Result);
  try
    idhtp.Get(url, lStream);
    lStream.Position := 0;
    Result := UTF8Decode(lStream.ReadString(lStream.Size));
  finally
    FreeAndNil(lStream);
  end;
end;

But of course it doesn't work because I'm not authorized

I solved my problem as written here: [https://our.umbraco.org/forum/umbraco-7/developing-umbraco-7-packages/57862-Authentication-to-call-the-WebAPI-by-external-application][1]

Thanks

is working on a reply...