Authentication
Every request carries a bearer token. Tokens are scoped to one organisation and never expire, so treat one like a password.
Creating a token
Generate a token in Settings → API. You will see the value once.
curl https://api.ledgerline.example/v1/accounts \
-H "Authorization: Bearer sk_live_..."Scopes
Tokens carry the narrowest scope that will do the job.
| Scope | Allows |
|---|---|
read | Reading accounts and transactions |
write | Creating and updating records |
admin | Managing members and tokens |
A leaked token can be revoked from the same screen. Revoking is immediate.