Skip to main content
POST
Get CODB upload credentials

Authorizations

x-api-key
string
header
required

Identifies the partner software. Issued by Codaclean. Required on every call, including POST /token.

Authorization
string
header
required

Identifies the user and their accounting firm. Send the idToken returned by POST /token as Authorization: Bearer <idToken>. Valid for 1 hour.

Response

Temporary upload credentials.

Temporary AWS credentials allowing s3:PutObject under <bucketName>/<prefix>/ only.

accessKeyId
string
secretAccessKey
string
sessionToken
string
bucketName
string
prefix
string

Key prefix to upload under (uploads/<tenant>).

expirationUtc
string<date-time>