Quickstart
Create a least-privilege sandbox application, make your first API v2 call, then expand only the authority your integration actually needs.
Choose the smallest FinanceGPT primitive
Start from the capability you need, then open its API reference and required scope.
Create and operate a sandbox application
Issue a least-privilege API key or OAuth service credential, then rotate or revoke it from the integrations console.
Make one governed API v2 request
Send a bearer credential, explicit JSON accept header and only the scopes required by the operation.
Validate the contract before scaling
Run bounded deterministic sandbox suites, inspect contract-change evidence and resolve readiness gaps before production.
Inspect usage, latency and failures before scaling
Use workspace-scoped request evidence, generated client starters and SDK contract fingerprints to validate the integration.
Pin the contract and prepare production evidence
Use the compatibility policy, contract lock and CI checks to detect drift, then export evidence for human production review.
Promote the application, not its authority
Production access, model promotion and Financial Actions remain separately entitled and governed.
Carry evidence into support and certification
Open evidence-linked support cases and submit eligible integrations for explicit human certification review without exposing credentials or creating authority.
1. Choose a primitive and scope family
data:* / financial:*Data licensing and workspace permissions remain enforced.
quant:*Quantitative outputs remain the numeric authority.
lqm:*LQM is quantitative only; it does not generate language.
qlm:*Language explains evidence; it does not become numeric authority.
workflow:*Human-review and control nodes remain enforceable at runtime.
actions:*API identity never creates transaction authority by itself.
agent:* / agents:mcp:*Agent access remains tool-, scope- and policy-bounded.
knowledge:*Retrieval permissions and source evidence remain attached to results.
2. Create a sandbox application
Select only the scopes required for the first operation. Sandbox credentials do not read production workspace data, and a credential never grants model promotion or Financial Actions authority by itself.
3. Make your first API v2 call
curl -H "Authorization: Bearer $FINANCEGPT_API_KEY" \
-H "Accept: application/json" \
https://financegpt.dev/api/v2/workspace
Expected boundary: a workspace-scoped response. Missing or invalid scopes fail closed rather than falling through to broader access.
4. Discover the platform contract
curl https://financegpt.dev/developers/manifest.json
curl https://financegpt.dev/developers/api-reference.json
curl https://financegpt.dev/developers/sdks/manifest.json
curl https://financegpt.dev/developers/changelog.json
curl https://financegpt.dev/developers/versioning.json
curl https://financegpt.dev/developers/ci/contract-lock.json
curl https://financegpt.dev/.well-known/financegpt-developer.json
curl https://financegpt.dev/developers/openapi.yaml5. Generate, test, integrate and observe
Generate, integrate and observe with generated client starters that carry the current OpenAPI fingerprint and environment-variable credential placeholders. Sandbox test suites reuse deterministic Developer Catalog fixtures, while observability and readiness expose metadata and evidence without raw credentials or request/response bodies.
Production is a separate decision
Move to production only after the application has an eligible developer entitlement and the required workspace permissions. Model promotion, QLM composition, external-agent execution and Financial Actions each retain their own governance controls.
Review API plansOperate with evidence
When an integration reaches production review, carry the same contract and runtime evidence into support and certification. Do not send API keys or OAuth secrets with support requests.
Support policy Certification standard Developer programme