Developer FAQ

Can an API key post or approve accounting entries?

No. A key can create and submit drafts if its scopes and the person's role allow it, but approving, posting and reversing are always done by a person in the app. This keeps the maker-checker rule intact.

Which company does an API key work in?

The company it was made in. You can leave out the X-Company-Id header; sending a different company's id is refused.

What happens to a key when its maker leaves the company?

It stops working, because a key always acts as its maker with their current membership and role.

Does ISOERP send webhooks?

Not today. Poll the API, or use report exports.

Is there an OpenAPI description?

Yes. The API reference in this documentation is generated from the product's own OpenAPI description, and GET /api/tools returns the same routes as a tool catalogue.

How do I connect an AI assistant?

Create an API key with the mcp scope and point your MCP client at /api/ameen/mcp with that key. See the MCP guide.