FlowAccount · Authentication Profile

Flowaccount Authentication

Authentication

FlowAccount Open API uses OAuth 2.0 client credentials. A registered integration exchanges its client_id + client_secret at the token endpoint ({base}/token) with grant_type=client_credentials and scope=flowaccount-api to obtain a bearer access token, then sends it as `Authorization: Bearer ` on every request. Sandbox and Production credentials are issued separately on registration. Evidence: flowaccount/open-api apps/api/flowaccount-webhook (AuthenticationService.ts, env.json) documents grant_type=client_credentials, scope=flowaccount-api, and a tokenPost flow; the OpenAPI declares the resulting bearer scheme.

FlowAccount secures its APIs with oauth2 and http across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials flow(s).

CompanyAccountingInvoicingPayrollPoint of SaleSMEFinanceTaxThailandBookkeeping
Methods: oauth2, http Schemes: 2 OAuth flows: clientCredentials API key in:

Security Schemes

oauth2ClientCredentials oauth2
bearer http
scheme: bearer

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-19'
method: searched
source: openapi/flowaccount-openapi-original.json
docs: https://developers.flowaccount.com/
description: >-
  FlowAccount Open API uses OAuth 2.0 client credentials. A registered integration
  exchanges its client_id + client_secret at the token endpoint ({base}/token) with
  grant_type=client_credentials and scope=flowaccount-api to obtain a bearer access
  token, then sends it as `Authorization: Bearer <token>` on every request. Sandbox
  and Production credentials are issued separately on registration. Evidence:
  flowaccount/open-api apps/api/flowaccount-webhook (AuthenticationService.ts, env.json)
  documents grant_type=client_credentials, scope=flowaccount-api, and a tokenPost flow;
  the OpenAPI declares the resulting bearer scheme.
summary:
  types:
  - oauth2
  - http
  oauth2_flows:
  - clientCredentials
  scopes:
  - flowaccount-api
schemes:
- name: oauth2ClientCredentials
  type: oauth2
  flow: clientCredentials
  token_endpoint: "{base}/token"
  token_endpoint_note: >-
    Base is the environment server, e.g. https://openapi.flowaccount.com/sandbox
    for sandbox. grant_type=client_credentials, scope=flowaccount-api,
    content-type application/x-www-form-urlencoded.
  scopes:
  - flowaccount-api
  sources:
  - https://github.com/flowaccount/open-api
- name: bearer
  type: http
  scheme: bearer
  bearerFormat: Reference
  description: Bearer access token obtained from the client-credentials token endpoint.
  sources:
  - openapi/flowaccount-openapi-original.json