Skip to main content
Each API token belongs to one company. It determines which company’s data the integration can access and which operations it can perform.

Authorizing requests

Send the token in the Authorization header:
In Fintoro, open Automatizácie → Fintoro API → Vytvoriť API kľúč (Create API key). First connection covers token creation and checking the connection.

Permissions

Choose read for an integration that only reads data. Insufficient permissions return 403.

Storing and replacing a token

The token is only shown when created. Store it on your server with the integration’s credentials; keep it out of browser code and public repositories. Create a separate token for each integration. To replace a token, create a new one, configure the integration to use it, and check the connection. Then revoke the old token.

Revoking a token

In Fintoro, open Automatizácie → Fintoro API and select Zneplatniť (Revoke) from the key’s menu. Subsequent requests using that token return 401 Unauthenticated.. The key’s record and history remain available.