Skip to main content

Authentication

Every request must include your API token as a bearer token:

Authorization: Bearer ftk_live_...

Managing your token​

Tokens are managed in the Fintraker app under Settings → API Access:

  • Each account has a single API token.
  • The token value is shown once when generated; it cannot be retrieved again. Store it in a secrets manager.
  • Generating a new token replaces the previous one, which stops working immediately.
  • Revoking the token disables API access until a new one is generated.

Failed authentication​

Requests with a missing, malformed, revoked, or unknown token receive 401 Unauthorized:

{ "message": "Missing or invalid API token" }