Overview
Authentication, base URL and conventions for the Fincore API.
Base URL
All requests are made over HTTPS to https://api.fincore.com. Paths in this reference are relative to it.
Authentication
Every request is identified by an application key sent in the app_key header. Endpoints that act on behalf of a user or teller also require a bearer access token from the token endpoints under Authentication.
1. Obtain an access token
shell
curl -X POST "https://api.fincore.com/api/auth/get_tokens" \
-H "app_key: YOUR_APP_KEY" \
-H "Content-Type: application/json" \
-d '{ "username": "your_username", "password": "********" }'json
{
"access_token": "<access_token>",
"expires_in": 600,
"refresh_token": "<refresh_token>",
"refresh_expires_in": 7200
}Response
2. Call authenticated endpoints
shell
curl "https://api.fincore.com/v2/api/customer/me" \
-H "app_key: YOUR_APP_KEY" \
-H "Access-Token: <access_token>"Responses & errors
Responses are JSON. Standard HTTP status codes indicate success (2xx), client errors (4xx) and server errors (5xx). All example responses in this reference are sanitized — tokens and personal data are replaced with placeholders.