Skip to content
Tovari Docs

Overview

Financial Tracker API 1.0.0

Section titled “Financial Tracker API 1.0.0”

Multi-tenant personal-finance REST API (AWS API Gateway + Lambda + PostgreSQL). All money values are integer minor units (cents). Every 2xx response is wrapped in a { data, requestId, timestamp, message? } envelope; errors use { errorCode, message, fieldErrors?, requestId, timestamp }. Requests are scoped to the caller org via row-level security. Write endpoints accept an optional X-Idempotency-Key header. This spec is generated by scripts/generate-openapi.js (KAN-240).

Information

  • License: MIT
  • OpenAPI version: 3.0.3

Operations

Section titled “Operations”
POST
/auth/signup
POST
/auth/login
POST
/auth/google
POST
/auth/forgot-password
POST
/auth/confirm-password-reset
POST
/auth/refresh
GET
/accounts
POST
/accounts
PUT
/accounts/order
GET
/accounts/{id}
PUT
/accounts/{id}
DELETE
/accounts/{id}
GET
/accounts/{id}/value-history
POST
/accounts/{id}/reconcile
GET
/accounts/{id}/view-preference
PUT
/accounts/{id}/view-preference
GET
/budget
POST
/budget/sections
PUT
/budget/sections/{sectionId}
DELETE
/budget/sections/{sectionId}
POST
/budget/categories
PUT
/budget/categories/{categoryId}
DELETE
/budget/categories/{categoryId}
PUT
/budget/categories/{categoryId}/budgeted
PUT
/budget/amounts
POST
/budget/budgeted-batch
GET
/transactions
POST
/transactions
PUT
/transactions/{id}
DELETE
/transactions/{id}
GET
/payees
POST
/payees
POST
/payees/merge
PUT
/payees/{id}
DELETE
/payees/{id}
POST
/payees/{id}/apply-category
GET
/bills
POST
/bills
GET
/recurring-suggestions
POST
/recurring-suggestions/{id}/dismiss
POST
/recurring-suggestions/{id}/restore
GET
/bills/projection
GET
/bills/scheduled
PUT
/bills/{id}
DELETE
/bills/{id}
POST
/bills/{id}/enter
POST
/bills/{id}/skip
POST
/bills/{id}/mark-scheduled
DELETE
/bills/{id}/mark-scheduled
GET
/reports/spending-by-category
GET
/reports/spending-by-payee
GET
/reports/spending-by-month
GET
/reports/spending-by-month/{month}/payees
GET
/reports/spending-by-payee/{payeeId}/transactions
GET
/reports/income-vs-expense
GET
/reports/income-vs-expense/{month}
GET
/reports/net-worth
GET
/reports/cash-flow
POST
/imports/upload-url
GET
/imports
GET
/imports/{id}
POST
/imports/{id}/process
POST
/imports/{id}/mapping
PATCH
/imports/{id}/staged/{stagedId}
POST
/imports/{id}/batch
POST
/imports/{id}/commit
POST
/imports/{id}/cancel
GET
/csv-mapping-profiles
POST
/csv-mapping-profiles
PUT
/csv-mapping-profiles/{id}
DELETE
/csv-mapping-profiles/{id}
POST
/plaid/link-token
POST
/plaid/exchange
GET
/plaid/items
DELETE
/plaid/items/{id}
POST
/plaid/items/{id}/relink
POST
/plaid/items/{id}/relink/complete
POST
/plaid/webhooks
GET
/lookups
GET
/categories/catalog
POST
/categories/adopt
GET
/dashboard/safe-to-spend
GET
/dashboard/recent-transactions

Authentication

Section titled “Authentication”

bearerAuth

Section titled “bearerAuth”

Cognito ID token (RS256). Sent as Authorization: Bearer <idToken>; verified by the Lambda TokenAuthorizer, which reads org/user/role claims. Obtain via /auth/login, /auth/signup, /auth/google, or /auth/refresh.

Security scheme type: http

Bearer format: JWT