Skip to main content
You exchange your long-lived API key for a short-lived token, then list your Monterey accounts.

Prerequisites

  • An API key scoped to at least one organization
  • The accounts:read API permission on that key
  • The key prefix shown in the client portal
  • curl and jq

1. Mint an access token

The access token expires after 3600 seconds. Keep the API key in your secret store and re-run the exchange before expiry.

2. List accounts

A successful response includes items and pagination metadata:
If next_cursor is not null, pass it as the next request’s cursor parameter.

Authentication

Token exchange, expiry, API-key rotation, and authorization errors.

Conventions

Rate limits, pagination, dates, money, and shared errors.

Domain concepts

Organizations, people, borrower roles, accounts, and transactions.