Skip to content

Integrating SailPoint with Moneybird

Moneybird is a cloud-based invoicing and accounting platform used by small and medium-sized businesses to manage contacts, sales invoices, purchase transactions, and financial reporting. It lets businesses create and send invoices and estimates, reconcile transactions against connected bank accounts, and automate recurring billing through subscriptions. This document provides instructions to configure a new direct connection to a Moneybird source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Moneybird connector supports the following:

Account Management

  • Aggregate Users

Note

User roles and permissions are captured as part of the Account aggregation itself (embedded within each user administration record via the user_type ), so a separate Entitlement aggregation is not required.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  1. Sign in to Moneybird.
  2. Go to Settings > Extensions > External applications and AI connections > New API token.
  3. Copy the Administration ID that appears directly in the browser's address bar as part of the URL, for example, moneybird.com/123456789012345678/.
  4. Copy and securely store the following details, which are required during connector configuration:
    • Administration ID
    • API Access Token

Note

A personal API token gives access to the entire Moneybird administration it was created under. Deactivating the user account that generated the token, or revoking the token, immediately invalidates it. Tokens should be transmitted only over HTTPS and stored securely - Moneybird treats them like a password. Moneybird authenticates API requests using the HTTP Authorization header with a Bearer token: Authorization: Bearer <API_TOKEN>. No additional custom headers are required for the Users endpoint. OAuth 2.0 is also supported and is recommended for applications that need access to multiple customers Moneybird administrations (for example, multi-tenant products). Personal access tokens are the standard method when the integration only needs to access a single administration.

Required Permissions

Typical roles that can generate API keys:

  • Owner - Full access, including administration settings and the ability to grant/revoke user access and permissions.
  • Employee / Accountant - Access is scoped to whichever permission areas (sales_invoices, documents, estimates, bank, settings, time_entries, etc.) have been granted to that user; a token generated under such a user inherits the same visibility.

For detailed information on Moneybird API authentication, refer to the Moneybird API documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.