Authentication

Session-Based (Browser)

When using the dashboard, authentication is handled via HTTP-only cookies set during login. No manual token management needed.

Available on Scale tier

For server-to-server integrations, use API keys:

curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://app.finmi.io/api/transactions

Generate API keys at Settings → API Keys.

Type	Access
Read-only	GET requests only
Full access	GET, POST, PATCH, DELETE

API keys can be revoked and regenerated at any time from the API Keys settings page. Revoking a key immediately invalidates all requests using it.