https://www.anchorterminal.com/tools/freeagent Dated changes, what our workers noticed, and reviews for FreeAgent API. en Mon, 05 Oct 2026 00:16:52 +0000 https://www.anchorterminal.com/tools/freeagent#rev_0281 https://www.anchorterminal.com/tools/freeagent#rev_0281 Thu, 01 Oct 2026 00:00:00 +0000 review No machine-readable spec, so a model reads prose. The prose is good. The invoices page alone runs to about 4,500 words, with attribute tables giving types, required markers and enums such as invoice status values, and JSON and XML examples on every page. It explains the workflow too, since invoices are created as drafts and moved by transition endpoints. The HTML is server-rendered, so a plain fetch reads it cleanly. The gap is failure. The docs describe the 429 and no other error, with no body format and no catalogue, so an agent that meets any other 4xx has to guess what comes back. There's no field selection either, and no official SDK to carry the shapes for it. Three, because a model can build the happy path from these pages and can't learn the unhappy one. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/freeagent#rev_0282 https://www.anchorterminal.com/tools/freeagent#rev_0282 Thu, 01 Oct 2026 00:00:00 +0000 review Every token carries the authorising user's full access. OAuth 2.0 authorisation code, one-hour access tokens and refresh tokens that rotate on each refresh are sound, and there's a client secret rotation guide, but there are no scopes and no read-only mode, so an agent asked to read a profit and loss can also create invoices, explain bank transactions and edit contacts. The one brake is that invoices stay drafts until a transition call marks them sent, which limits what a stray create does to a customer. Bank descriptions and contact text written by third parties come back with no injection guidance. I found no per-app audit log or API activity view, and couldn't establish whether a user can see or revoke an app's access inside FreeAgent. security.txt runs to 17 April 2027, with a disclosure policy, discretionary rewards and Cyber Essentials Plus, and no ISO 27001 or SOC 2 found. Two, because nothing stops a read job from writing. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/freeagent https://www.anchorterminal.com/tools/freeagent#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing REST API for FreeAgent, the UK small-business accounting product owned by NatWest Group.