Quick start

Get your credentials

Your client ID and client secret are provided by Tesouro during onboarding. To request access, have your designated team lead submit an access request.

Get an access token

Exchange your credentials for a short-lived JWT:

curl --location 'https://api.sandbox.tesouro.com/openid/connect/token' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'grant_type=client_credentials' \
  --data-urlencode 'client_id=YOUR_CLIENT_ID' \
  --data-urlencode 'client_secret=YOUR_CLIENT_SECRET'

Make your first API call

Use the token to call the FinOps API. For example, list your counterparts:

curl --request GET \
  --url https://api.sandbox.tesouro.com/v1/counterparts \
  --header 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  --header 'x-organization-id: YOUR_ORGANIZATION_ID' \
  --header 'X-Finops-Version: 2025-06-23'

Next steps

Learn about authentication concepts, token types, and security models
Understand the Tesouro account structure
Explore the API concepts for environments, versioning, and rate limiting
Embed pre-built UI with embedded components for invoicing, expense management, and bill pay

Introduction API concepts

⌘I

Getting started

Embedded components

Authentication

Roles & permissions

Manage organizations

Common objects

Accounts payable

Accounts receivable

Expense management

Payments

Advanced

Accounting integrations

Next steps

​Next steps

Next steps