Getting started
Authentication
Every request to the Valverna API carries a bearer token in the Authorization header.
Use an app access token to work with an authorized business, or a personal API key to read
transaction data from businesses you own.
App access tokens
Valverna issues a vlv_ access token when a business approves your app through the authorization flow and your server exchanges the authorization code. Each token is scoped to that business and
the permissions it granted, so you do not need to send a businessId.
Request header
Authorization: Bearer vlv_8b2c4f1e9a...App access tokens do not expire automatically. They remain valid until the business revokes access
from their Valverna dashboard, at which point requests return 401 access_revoked.
Personal API keys
If you only need to read data from your own business, create a vlvk_ key from your Valverna business settings. Personal keys are read-only and can be
restricted to one business. An owner-wide key needs the businessId query parameter when your account owns more than one business.
Request header
Authorization: Bearer vlvk_4f81c9d2a7...Choose a credential
App integration
vlv_… Accessing a business that authorized your app, within its granted scopes.
Your own business
vlvk_… Read-only access for your scripts and internal tools, without registering an app.