v52

latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-043334230.9 KB

Source accounts

Generate one-time password

The Generate OTP endpoint generates a one-time password (OTP) for a bank feed connection. The OTP is returned along with an expiry time, after which it will no longer be valid.

For Sage only

Only call this endpoint for connections to Sage. Calling it for other integrations will return an error.

post/companies/{companyId}/connections/{connectionId}/bankFeeds/otp

Response

Success

otpstring required

The one-time password.

expirystring required

In Codat's data model, dates and times are represented using the <a class="external" href="https://en.wikipedia.org/wiki/ISO_8601" target="_blank">ISO 8601 standard</a>. Date and time fields are formatted as strings; for example:

2020-10-08T22:40:50Z
2021-01-01T00:00:00

When syncing data that contains DateTime fields from Codat, make sure you support the following cases when reading time information:

Coordinated Universal Time (UTC): 2021-11-15T06:00:00Z
Unqualified local time: 2021-11-15T01:00:00
UTC time offsets: 2021-11-15T01:00:00-05:00

Time zones

Not all dates from Codat will contain information about time zones.
Where it is not available from the underlying platform, Codat will return these as times local to the business whose data has been synced.

Example response

{
  "otp": "GT40U4",
  "expiry": "2026-04-08T10:30:00Z"
}