Overview
The Core API gives you access to chart of accounts, customer and vendor profiles, tax configuration, inventory, invoices, receipts, bills, expenses, payments, and manual journal entries for a workspace.
Get your Papertracc API key and workspace identity from the dashboard before making requests. Use the API key for bearer auth and send the workspace identity in the identity header.
Secret-key requests run with the role of the team member who generated the keys, and that member must belong to the workspace you call. If their role lacks the permission an endpoint needs, the request fails with 403 and error_code: PERMISSION_DENIED. Keys are revoked when that member is removed from the organisation. On Core endpoints, public keys can only read the chart of accounts and tax profiles, and skip the role check.
Keys
Core endpoints need a secret key. Three read-only endpoints also accept a public key: List Accounts, Get Chart Types and Get Tax Profiles. Each endpoint page ends with a Keys line that says which keys it accepts.
Permissions
Every endpoint lists the permission it needs in its description. A workspace manager can add a missing permission to the key owner’s role.
Lists and errors
- Lists use cursor pagination. See Pagination.
- Failed requests return
status: falsewith amessage. See Errors for the status codes and error codes.

