OTB category catalog + onboarding questionnaire

GET

/categories/catalog

curl --request GET \
  --url https://api.tovarifinancial.com/categories/catalog \
  --header 'Authorization: Bearer <token>'

• Production
• Development

Authorizations

• bearerAuth

Responses

200

Catalog

Media typeapplication/json

object

data

required

object

sections

Array<object>

object

code

string

label

string

sortOrder

number

categories

Array<object>

object

code

string

sectionCode

string

label

string

iconCode

string

colorCode

string

isCore

boolean

sortOrder

number

questions

Array<object>

object

id

string

prompt

string

multi

boolean

options

Array<object>

object

value

string

label

string

primaryCode

string

relatedCodes

Array<string>

message

string

requestId

required

string

timestamp

required

string format: date-time

Example^generated

{
  "data": {
    "sections": [
      {
        "code": "example",
        "label": "example",
        "sortOrder": 1
      }
    ],
    "categories": [
      {
        "code": "example",
        "sectionCode": "example",
        "label": "example",
        "iconCode": "example",
        "colorCode": "example",
        "isCore": true,
        "sortOrder": 1
      }
    ],
    "questions": [
      {
        "id": "example",
        "prompt": "example",
        "multi": true,
        "options": [
          {
            "value": "example",
            "label": "example",
            "primaryCode": "example",
            "relatedCodes": [
              "example"
            ]
          }
        ]
      }
    ]
  },
  "message": "example",
  "requestId": "example",
  "timestamp": "2026-04-15T12:00:00Z"
}

401

Missing, invalid, or expired bearer token

Media typeapplication/json

object

errorCode

required

Machine-readable error code (AUTH_ERROR_CODES).

string

Allowed values: INVALID_EMAIL_FORMAT USER_ALREADY_EXISTS ORG_NAME_TAKEN INVALID_INVITE_CODE WRONG_PASSWORD USER_NOT_FOUND AUTHENTICATION_FAILED EXPIRED_CODE INVALID_CODE INVALID_PASSWORD VALIDATION_ERROR SIGNUP_FAILED DATABASE_ERROR SERVICE_UNAVAILABLE PLAID_ERROR IDEMPOTENCY_CONFLICT ACCOUNT_ALREADY_LINKED NOT_FOUND

message

required

string

fieldErrors

Optional field-level validation errors, keyed by field name.

object

key

additional properties

Array<string>

requestId

required

string

timestamp

required

string format: date-time

Example

{
  "errorCode": "INVALID_EMAIL_FORMAT"
}

500

Internal error (no internal detail leaked)

Media typeapplication/json

object

errorCode

required

Machine-readable error code (AUTH_ERROR_CODES).

string

Allowed values: INVALID_EMAIL_FORMAT USER_ALREADY_EXISTS ORG_NAME_TAKEN INVALID_INVITE_CODE WRONG_PASSWORD USER_NOT_FOUND AUTHENTICATION_FAILED EXPIRED_CODE INVALID_CODE INVALID_PASSWORD VALIDATION_ERROR SIGNUP_FAILED DATABASE_ERROR SERVICE_UNAVAILABLE PLAID_ERROR IDEMPOTENCY_CONFLICT ACCOUNT_ALREADY_LINKED NOT_FOUND

message

required

string

fieldErrors

Optional field-level validation errors, keyed by field name.

object

key

additional properties

Array<string>

requestId

required

string

timestamp

required

string format: date-time

Example

{
  "errorCode": "INVALID_EMAIL_FORMAT"
}

503

Service temporarily unavailable — errorCode is SERVICE_UNAVAILABLE. A TRANSIENT, RETRYABLE condition rather than a defect in the request: a query that exceeded its time budget, a lost or refused database connection, a saturated connection pool, or an outage at an upstream provider the request depends on (the authentication provider, or the bank data provider on a bank-connection operation). The identical request may succeed on retry — back off briefly and, on a write, resend the same X-Idempotency-Key where the operation accepts one.

Media typeapplication/json

object

errorCode

required

Machine-readable error code (AUTH_ERROR_CODES).

string

Allowed values: INVALID_EMAIL_FORMAT USER_ALREADY_EXISTS ORG_NAME_TAKEN INVALID_INVITE_CODE WRONG_PASSWORD USER_NOT_FOUND AUTHENTICATION_FAILED EXPIRED_CODE INVALID_CODE INVALID_PASSWORD VALIDATION_ERROR SIGNUP_FAILED DATABASE_ERROR SERVICE_UNAVAILABLE PLAID_ERROR IDEMPOTENCY_CONFLICT ACCOUNT_ALREADY_LINKED NOT_FOUND

message

required

string

fieldErrors

Optional field-level validation errors, keyed by field name.

object

key

additional properties

Array<string>

requestId

required

string

timestamp

required

string format: date-time

Example

{
  "errorCode": "INVALID_EMAIL_FORMAT"
}