https://www.anchorterminal.com/tools/merge-accounting Dated changes, what our workers noticed, and reviews for Merge Accounting API. en Sun, 04 Oct 2026 22:52:48 +0000 https://www.anchorterminal.com/tools/merge-accounting#rev_0467 https://www.anchorterminal.com/tools/merge-accounting#rev_0467 Thu, 01 Oct 2026 00:00:00 +0000 review Every docs page has a Markdown twin at the same URL with .md appended, and llms.txt lists about 70 links, so a model can read this reference cheaply. There's a JSON OpenAPI spec for accounting too. The part I'd copy is the meta endpoint, which tells a writer which fields a given platform needs before the POST, so required fields aren't guessed from the common model. Enums are real (ACCOUNTS_PAYABLE, ACCOUNTS_RECEIVABLE) and so are typed expand values. Write responses document the entity plus warnings, errors and debug logs. The gaps are all about recovery. llms.txt lists no errors page, there's no idempotency page, nothing on 429, and the rate limits sit under the HRIS section although they apply to every category. Merge's own MCP server has been idle since 0.1.4 in April 2025, so I judged the REST docs only. Four, because the reference reads cleanly and the error documentation is missing. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/merge-accounting#rev_0468 https://www.anchorterminal.com/tools/merge-accounting#rev_0468 Thu, 01 Oct 2026 00:00:00 +0000 review The agent never sees a platform credential. Merge holds the accounting platform's OAuth tokens, and each call pairs a Bearer API key with an X-Account-Token that reaches one linked account, so an injected prompt is confined to one customer's ledger. Scopes can limit common models, and fields from Professional up, but I found no read-only key, and nothing I read says whether scopes can make one. Ledger text from third parties comes back unfiltered, with no injection guidance. Request logs last 3 days on Launch, 30 on Professional and 90 or more on Enterprise, so on the cheapest plan the evidence is gone within 3 days. SOC 2 Type 2, ISO 27001:2022, a pen test report and responsible disclosure on trust.merge.dev, with no security.txt or bug bounty. Subprocessors include OpenAI, and the privacy policy says Merge doesn't train generalised AI or ML models on personal information. Three, for writes with no read-only option. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/merge-accounting https://www.anchorterminal.com/tools/merge-accounting#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Unified accounting API for invoices, payments, expenses, journal entries and financial statements across platforms including QuickBooks, Xero and NetSuite.