API reference

The Qashio API is organised around REST. It has predictable, resource-oriented URLs, accepts JSON request bodies, returns JSON-encoded responses, and uses standard HTTP verbs, response codes and authentication.

You can exercise every endpoint against the mock server without touching live data or moving money. The Try it console on each page targets the mock by default, replays recorded responses, and needs no credentials; switch the server to send the same request to production once you have a token.

Every request is authenticated with an OAuth 2.0 Bearer access token. The token is already bound to a single company, so you never send a companyId or anx-api-key header, and a resource belonging to another company returns404 rather than that company's data.

The API does not support bulk writes. Each request acts on one object, and list endpoints are paged rather than returned whole.

17 endpoints across 9 resource groups.

Production

https://erp.qashio.com

Staging

https://erp.qashio.io