# Codat (slim)

> Codat connects a business's accounting, banking and commerce software to financial products and banks through one REST API. Product APIs cover bill pay, expenses, bank feeds and lending data, with official SDKs for TypeScript, Python and C#.

- Full: https://www.anchorterminal.com/tools/codat.md (~7,050 tokens) · this version ~1,780 tokens · JSON https://www.anchorterminal.com/tools/codat.json · canonical https://www.anchorterminal.com/tools/codat
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**B · 64.3/100 · rank #280 of 722 · #4 in Accounting & invoicing · not agent-ready · confidence medium**


Assessment: Public OpenAPI specs, an Idempotency-Key header on writes, Retry-After on 429 and a written three-month deprecation notice suit an agent that retries. Access is the limitation. No price or self-serve signup is published, the general Accounting API is closed to new clients, and API keys carry no scopes.

## Facts

- Kind: HTTP API · vendor: Codat Limited · category: Accounting & invoicing · legal entity: Codat Limited · provenance 82/100
- Endpoint: `https://api.codat.io` (HTTP)
- Auth: API key · pricing: Paid · x402: no · licence: Proprietary service under Codat's Master Services Agreement. The documentation repository codatio/codat-docs is Apache-2.0
- Probe metrics: not measured yet (probes haven't run)
- APIs for new clients: Platform (52 operations), Lending (156), Bill Pay synchronous (25), Expenses (48), Bank Feeds (33) and Spend Insights (7), all OpenAPI 3 in codatio/oas and served from https://api.codat.io
- Legacy APIs: Accounting (135 operations), Banking, Commerce, Assess and Files, each marked as relevant only to existing clients. Sync for Payables v1, Sync for Expenses v1 and Sync for Payroll are in maintenance until 1 May 2027
- Accounting packages: 22 integration folders in the docs, among them Xero, QuickBooks Online and Desktop, NetSuite, Sage Intacct, Sage 50 and 200, Dynamics 365 Business Central, MYOB, FreshBooks, Zoho Books, Workday and a Codat Sandbox
- Credentials: API key, Base64 encoded in an `Authorization: Basic` header. Up to 10 named keys, created and deleted in the Portal or through /apiKeys. No scopes
- Rate limits: 1,000 requests a day times (1 + active connected companies), reset at 00:00 UTC. 10 concurrent requests per active connected company. 1,000 a minute per IP
- Writes: Create, update and delete across 18 accounting data types, asynchronous with a push operation key and write webhooks. The synchronous Bill Pay API answers in the request
- Idempotency: `Idempotency-Key` GUID on POST and PATCH, cached 90 minutes, not cached for 429
- Paging and filters: `page` and `pageSize` (default 100, maximum 5,000), a `query` filter language and `orderBy`. Bill Pay lists use a continuation token
- Errors: JSON with statusCode, service, error, correlationId, canBeRetried, detailedErrorCode and a validation object. 402 marks a free trial limit
- SDKs: TypeScript @codat/platform 6.2.1 and Python codat-platform 5.0.1 (23 April 2026), C# Codat.Platform 6.2.1, one package per product. Java archived 2 April 2026, Go 7 May 2026
- Sandbox: Codat Sandbox integration with sample companies, no credentials, excluded from billing. Test clients are limited to 50 active connected companies
- SLA: Service credits of 10, 30 and 100 per cent of the platform fee when monthly uptime is below 99, 95 and 90 per cent (standard MSA, Schedule 1)
- Certifications: SOC 2 Type II and ISO 27001, audited yearly per codat.io/security. Private bug bounty, yearly penetration test. Hosted on Microsoft Azure
- MCP server: None found

- Scores: Reliability 80, Performance pending, Schema & documentation 77, Agent ergonomics 81, Security & auth 49, Payments & pricing 10, Task success pending, Maintenance & community 75, Transparency & trust 71 · total over the 7 assessed categories
- Why: Reliability, Graded on the hosted REST API at api.codat.io. · Schema & documentation, Public OpenAPI 3 specs for every API in codatio/oas, in JSON and YAML (25). · Agent ergonomics, `pageSize` from 1 to 5,000 with a default of 100, and a `query` filter that cuts results. · Security & auth, Plain API keys in a Basic header, up to 10 per client, named, revocable in the Portal or through the API. · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, Latest changelog entry on 1 October 2026 (30). · Transparency & trust, Closed service with a published Master Services Agreement, versioned and dated, naming Codat Limited and its company number (15).
- Sources: 23, open questions: 6, both in the full twin
- Capabilities: accounting.unified, accounting.bills, accounting.reports, accounting.ledger, accounting.invoices
- JSON: https://www.anchorterminal.com/api/v1/tools/codat.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/codat.svg` or a link to https://www.anchorterminal.com/tools/codat from a page on codat.io or one of its subdomains, or the README of github.com/codatio/oas, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Send `Authorization: Basic <base64 of the API key>` to https://api.codat.io. The Portal shows the ready-made header value
2. Send a new GUID as `Idempotency-Key` on every POST and PATCH, and reuse the same key when retrying after a 429
3. Treat writes as asynchronous on most APIs. Keep the push operation key and wait for the `{dataType}.write.successful` or `.unsuccessful` webhook
4. Call the Get model (options) endpoint for the connection before a create or update, because required fields differ by accounting package
5. Filter with `query=modifiedDate>...` and keep `pageSize` at 100. The daily quota is 1,000 requests times one plus the number of active connected companies

## Connect

```bash
npm install @codat/platform
```

```bash
curl https://api.codat.io/companies \
  -H "Authorization: Basic $CODAT_ENCODED_API_KEY"
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/codat

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Apideck Accounting API + MCP | BB | 72.9 | accounting.unified, accounting.ledger, accounting.invoices, accounting.bills, accounting.reports | https://www.anchorterminal.com/tools/apideck-accounting.min.md |
| Merge Accounting API | BB | 70 | accounting.unified, accounting.ledger, accounting.invoices, accounting.bills, accounting.reports | https://www.anchorterminal.com/tools/merge-accounting.min.md |
| Rutter Accounting API | C | 55.6 | accounting.unified, accounting.ledger, accounting.invoices, accounting.bills, accounting.reports | https://www.anchorterminal.com/tools/rutter.min.md |
| Xero API + MCP | B | 67.2 | accounting.ledger, accounting.invoices, accounting.bills, accounting.reports | https://www.anchorterminal.com/tools/xero.min.md |
| FreeAgent API | C | 57.2 | accounting.ledger, accounting.invoices, accounting.bills, accounting.reports | https://www.anchorterminal.com/tools/freeagent.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)