Sign inGet started
Docs
Get started

Moneybird API Authentication

How to authenticate Moneybird API requests: one Bearer API key plus a connectionId. MindCloud runs the OAuth flow and refreshes Moneybird tokens for you.

Every Moneybird API request through MindCloud needs two things: a MindCloud API Key and a connectionId for your Moneybird account. This page covers both, plus exactly how to send them, so you do not need to visit any other page to get authenticated.

Steps to authenticate

  1. Create a MindCloud account at app.mindcloud.co if you do not already have one.
  2. Generate a MindCloud API Key in API Keys. This is the Bearer token you send on every request. Keep it on your server.
  3. Create a Moneybird connection in Connections. Moneybird uses OAuth. When you create the connection, you are redirected to sign in to Moneybird and approve access — MindCloud stores the resulting tokens and refreshes them automatically, so your integration never has to.
  4. Copy the connection’s connectionId — you will send it on every request alongside your MindCloud API Key.

How requests are authenticated

Authentication has two layers. Your MindCloud API Key authenticates the request to MindCloud, sent as a Bearer token in the Authorization header. The connectionId selects the connected Moneybird account that should run the action. MindCloud stores and refreshes the Moneybird credentials behind that connection, so you never send provider tokens with your requests.

Pass connectionId in the query string for GET and DELETE actions, and in the JSON body for POST, PUT, and PATCH actions.

For example, calling List Administrations with an Moneybird connection looks like this:

curl --request POST \
  --url "https://connect.mindcloud.co/v2/universal/apps/moneyBird/actions/list-administrations/run" \
  --header "Authorization: Bearer $MINDCLOUD_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
  "connectionId": "$CONNECTION_ID",
  "arguments": {}
}'

The Authorization: Bearer <your MindCloud API Key> header authenticates you to MindCloud; the connectionId tells MindCloud which Moneybird account to run the action against. Missing or invalid Authorization returns 401, and a missing or mismatched connectionId returns 400.

Connect MoneyBird with OAuth2

Use a MoneyBird user who owns the administration you plan to connect.

  1. Sign in to MoneyBird

    Sign in with the MoneyBird account that will own the connected administration.

    MoneyBird sign in
  2. Create or choose a sandbox administration

    Create a sandbox administration for safe testing, or use an existing live administration that you own.

    Sandbox administration
  3. Open the external application page

    Open the MoneyBird application registration page to create the OAuth app used by MindCloud.

    New application
  4. Create the OAuth app and copy the client credentials

    Create the application, then copy the client ID and client secret into MindCloud if they are not already prefilled.

    New application
  5. Set the redirect URI and save the scope plan

    Register the exact MindCloud redirect URI and make sure the app is prepared for the scopes MoneyBird should request.

    New application
  6. Authorize the administration from MindCloud

    Return to MindCloud and start the OAuth popup. Sign in as the owner of the target administration so MoneyBird can issue the connection tokens.

Keep your key safe

Keep your MindCloud API Key on your server; do not ship it in browser code, mobile apps, public repositories, or logs. Anyone with the key can call the Universal API as your MindCloud account, across every connection you have created.