Your API key

Your data is yours to script against. The key lives in the app, and the docs read like they mean it.

Included, not an add-on

Every Endute subscription and trial includes full API access: accounts, transactions, balances, your data over HTTPS with a bearer key. There is no separate developer tier to buy and nothing to enable beyond creating a key. (Endute Connect, our standalone data product, uses the same API; as an app subscriber you already have everything it offers and more.)

Creating a key

In My Account, the API access card manages everything. Name a key for its purpose and create it; the secret is shown exactly once, in a dialog that will not let you fumble past without copying or confirming you saved it. We store only a hash, so a lost secret means a new key, which is thirty seconds of work and the reason naming them matters.

  • The card shows this month's API call count, each key's prefix and creation date, and a revoke button per key; revoked keys stay listed as an audit trail.
  • There is a sensible cap on active keys; revoke unused ones if you reach it.
  • API access requires an active subscription or trial; a lapsed one pauses the keys until renewal, without deleting them.

Treat the key like a password

The key reads your financial data. Keep it in a secrets manager or environment variable, never in shared code or a chat message, and revoke immediately on any suspicion; a fresh key is free.

Where the docs live

The full developer documentation, endpoints, authentication, pagination, sits at the API docs, with a quickstart that goes from key to first call in minutes.

What next

If the tool you want to feed speaks SimpleFIN rather than REST, that is included too. For a one-off copy of everything, data export needs no key at all.