Mint an aggregator webhook token

Mints a webhook token bound to an existing aggregator connection and returns the raw token plus its provider-facing webhook URL ONCE. Only the token’s SHA-256 hash is stored.

POST /v1/discovery/webhooks/tokens

Mint an aggregator webhook token

cURL

curl --request POST \
  --url https://matcher.sandbox.lerian.net/v1/discovery/webhooks/tokens \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "connection_config_name": "<string>"
}
'

201

{
  "token": "<string>",
  "webhook_url": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer token authentication (format: "Bearer {token}")

Body

application/json

connection_config_name · string · required

Config name of the existing aggregator connection the token binds to

Minimum string length: 1

Example:

"pluggy-main"

vendor · enum<string> · required

Aggregator vendor the token is minted for: pluggy (Pluggy) or belvo (Belvo)

Available options: pluggy, belvo

Example:

"pluggy"

Response

201

application/json

Created

token · string · required

Raw bearer token, surfaced exactly once; only its SHA-256 hash is stored server-side

vendor · enum<string> · required

Aggregator vendor the token is bound to

Available options: pluggy, belvo

Example:

"pluggy"

webhook_url · string · required

Fully-formed provider-facing receiver URL embedding the raw token in its path segment; configure this in the vendor dashboard