v50

latestOpenAPI 3.1.0raw.githubusercontent.com2026-07-2148120293.6 KB
Management

Create Access Token

Exchange the authorization code for an access token

post/auth/token

Headers

Finch-API-Versionstring date required

Header used to specify the version for a given API request. Current version is 2020-09-17.

Content-Typestring required

Used to indicate the original media type of the resource

Request body

client_idstring uuid

The client ID for your application

client_secretstring

The client secret for your application

codestring required

The authorization code received from the authorization server

redirect_uristring

The redirect URI used in the authorization request (optional)

Response

Access Token

access_tokenstring required

The access token for the connection

token_typestring required

The RFC 8693 token type (Finch uses bearer tokens)

connection_idstring required

The Finch UUID of the connection associated with the access_token

customer_idstring nullable

The ID of your customer you provided to Finch when a connect session was created for this connection

customer_namestring nullable

The name of your customer you provided to Finch when a connect session was created for this connection

account_idstring

[DEPRECATED] Use connection_id to identify the connection instead of this account ID

client_type'development' | 'production' | 'sandbox' required

The type of application associated with a token.

company_idstring

The Finch UUID of the company associated with the access_token.

connection_type'finch' | 'provider' required

The type of the connection associated with the token.

  • provider - connection to an external provider
  • finch - finch-generated data.
productsstring[] required

An array of the authorized products associated with the access_token

provider_idstring required

The ID of the provider associated with the access_token

entity_idsstring[] required

An array of entity IDs that can be accessed with this access token