Finish connecting your books
Redeem what QuickBooks Online or Xero sent the browser back with, and store the tokens.
POST
/
employees
/
finance
/
consent
/
complete
Finish connecting your books
curl --request POST \
--url https://app.mithunai.com/mithunai/api/v1/employees/finance/consent/complete \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"code": "<string>",
"state": "<string>"
}
'import requests
url = "https://app.mithunai.com/mithunai/api/v1/employees/finance/consent/complete"
payload = {
"code": "<string>",
"state": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({code: '<string>', state: '<string>'})
};
fetch('https://app.mithunai.com/mithunai/api/v1/employees/finance/consent/complete', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));Send the
code and state the vendor put on the return address — and, from QuickBooks, its
realmId — in the body, never in a URL. The state is spent on first use, whatever follows, and
must have been issued to you in this organisation. The tokens are stored in the saved connection,
sealed, and never returned; the refresh token is stored again each time the vendor rotates it.
For Xero, the organisation is read from the app’s connections: exactly one must be there.
It needs credential.manage — Owner or Admin — and a signed-in person.
AI employees are in beta.
404 as for Start connecting your
books.Body
string
required
What the vendor sent back as
code.string
required
What the vendor sent back as
state.string
QuickBooks only: what it sent back as
realmId.Response
201 with the saved connection, as Connections
lists it. The tokens are not in it.Last modified on November 12, 2026
Finish connecting your books
curl --request POST \
--url https://app.mithunai.com/mithunai/api/v1/employees/finance/consent/complete \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"code": "<string>",
"state": "<string>"
}
'import requests
url = "https://app.mithunai.com/mithunai/api/v1/employees/finance/consent/complete"
payload = {
"code": "<string>",
"state": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({code: '<string>', state: '<string>'})
};
fetch('https://app.mithunai.com/mithunai/api/v1/employees/finance/consent/complete', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));