List transactions

GET/public/v1/erp/transactions

Bearer token

Pull card spend in a form that is ready to post to your ledger.

The primary sync endpoint. Returns a paginated list of transactions, newest first, each already enriched with the supplier, chart of account, tax rate, approval state and cost allocation needed to create a journal entry, so you do not have to join that data yourself. Covers purchases, refunds, reversals, cash withdrawals, card loads and unloads.

Typical use is an incremental pull: filter on client_sync_status for what you have not pulled yet, post it to your ledger, then acknowledge it. You can also pull a transaction_time window, or filter on erp_sync_status. Amounts are returned fee-inclusive: billing_amount and clearing_amount already contain the associated fees.

To follow a refund back to its purchase, filter on parent_qashio_id.

Query parameters

pageinteger

Page number, 1-based. Default 1

Example 1

page_sizeinteger

Records per page. Default 10

Example 20

qashio_idstring

Qashio transaction reference (CT…)

parent_qashio_idstring

Return the children of this transaction: refunds and reversals

transaction_statusstring

draft, pushed, synced, failed

transaction_categorystring

purchase, refund, reversal, card_loading, card_unloading, cash_withdrawal, deposit, cashback, account_transfer, and related values

erp_sync_statusstring

draft, pending, validated, not_validated, success, failed

approval_statusstring

initiated, pending, approved, rejected, resolved, review, action_taken, admin_approved, external_dispute

card_last_fourstring

Exactly four digits

employee_idstring

Cardholder's employee identifier

transaction_currencystring

Currency the merchant charged in

billing_currencystring

Currency the company was billed in

transaction_time_fromdate

Transaction window, YYYY-MM-DD. Send both

transaction_time_todate

Transaction window, YYYY-MM-DD. Send both

client_sync_statusstring

Tracks which transactions you have already pulled. One value per request.

`not_synced`	Not acknowledged yet. Every new transaction starts here.
`synced`	Acknowledged with `POST /public/v1/erp/transactions/acknowledge`. Your copy is current.
`outdated`	Acknowledged, then changed. Pull it and acknowledge it again.

Example not_synced

exclude_from_syncboolean

Response

Array of transactions, plus pagination. Principal fields:

Group	Fields
Identity	`id` (Qashio UUID), `qashio_id` (`CT…`), `parent_id`, `parent_qashio_id`, `company_id`
Merchant	`merchant_name`, `merchant_city`, `merchant_country`, `mcc_code`, `mcc_description`
Amounts	`transaction_amount`, `transaction_currency`, `billing_amount`, `billing_currency`, `clearing_amount`, `vat_amount`, `fee_charges`
Timing	`transaction_time`, `cleared_at`, `created_at`, `updated_at`, `modified_date`
Classification	`transaction_type`, `transaction_category`, `clearing_status`, `settlement_status`, `message_type`
Card and holder	`card_name`, `card_external_id`, `card_last_four`, `card_holder_name`, `card_holder_email`, `employee_id`, `pool_account_name`, `pool_external_id`
Accounting	`erp_supplier` (`{ id, qashio_external_id, remote_id, remote_name, status }`), `erp_chart_of_account` (`{ id, qashio_external_id, remote_id, remote_name, account_type, account_number, account_currency }`), `erp_supplier_name`, `erp_chart_of_account_name`, `chart_of_account_number`, `erp_tax_rate_name`, `expense_category_name`, `vendor_trn`, `purchase_order_number`, `rrn`
Sync and approval	`client_sync_status`, `erp_sync_status`, `erp_sync_type`, `exclude_from_sync`, `sync_errors`, `approval_status`, `approved_date_time`, `approved_by` (`{ user_external_id, name }`)
Detail	`memo`, `transaction_description`, `segments`, `line_items`, `receipts`

line_items entries carry { id, amount, vat_amount, description, expense_category, erp_tax_rate_name, erp_tax_rate_remote_id, erp_chart_of_account_name, erp_chart_of_account_remote_id, segments, created_at, updated_at }.

segments carry your cost allocation. The four standard labels are Location, Project, Division and Department. Custom segment keys use underscores on this API (cost_center).

Response schema from the OpenAPI document

Field	Type	Description
`status_code`	integer
`success`	boolean
`data`	object[]
`id`	string
`merchant_name`	string
`erp_supplier_name`	string
`expense_category_name`	string
`erp_tax_rate_name`	string
`erp_chart_of_account_name`	string
`pool_account_name`	string
`card_name`	string
`card_holder_name`	string
`card_holder_email`	string
`qashio_id`	string
`transaction_amount`	integer
`transaction_currency`	string
`transaction_time`	string
`transaction_description`	string
`transaction_type`	string
`transaction_category`	string
`fee_charges`	integer
`clearing_status`	string
`billing_currency`	string
`memo`	string
`vat_amount`	integer
`status_code`	string
`message_type`	string
`settlement_status`	string
`rrn`	string
`vendor_trn`	string
`purchase_order_number`	string
`parent_id`	string
`parent_qashio_id`	string
`visible`	boolean
`cleared_at`	string
`exclude_from_sync`	boolean
`client_sync_status`	string	Whether your integration has pulled the current version of this transaction. Acknowledging it sets synced; a later change sets outdated.`not_syncedsyncedoutdated`
`erp_sync_status`	string
`erp_sync_type`	string
`approval_status`	string
`merchant_city`	string
`merchant_country`	string
`mcc_code`	string
`mcc_description`	string
`company_id`	string
`supplier_qashio_external_id`	string
`chart_of_account_qashio_external_id`	string
`erp_supplier_remote_id`	string
`erp_tax_rate_remote_id`	string
`erp_chart_of_account_remote_id`	string
`chart_of_account_number`	string
`pool_external_id`	string
`card_external_id`	string
`card_last_four`	string
`employee_id`	string
`erp_supplier`	string
`erp_chart_of_account`	string
`billing_amount`	integer
`clearing_amount`	integer
`approved_date_time`	string
`modified_date`	string
`approved_by`	string
`updated_at`	string
`created_at`	string
`sync_errors`	object[]
`id`	string
`name`	string
`label`	string
`code`	string
`erp_internal_id`	string
`erp_code`	string
`segments`	object[]
`id`	string
`name`	string
`label`	string
`code`	string
`erp_internal_id`	string
`erp_code`	string
`receipts`	object[]
`id`	string
`name`	string
`label`	string
`code`	string
`erp_internal_id`	string
`erp_code`	string
`line_items`	object[]
`id`	string
`name`	string
`label`	string
`code`	string
`erp_internal_id`	string
`erp_code`	string
`meta`	object
`request_id`	string
`timestamp`	string
`pagination`	object
`page`	integer
`page_size`	integer
`total_pages`	integer
`total_records`	integer
`has_next`	boolean
`has_previous`	boolean

Errors

400 (invalid enum, card_last_four not four digits, incomplete date range), 401, 403.

401Unauthorized - missing or invalid Bearer token

Every error carries an errors[] array and a meta.request_id. See Errors for the full envelope.

GET/public/v1/erp/transactions

curl -X GET 'https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20' \
  -H 'Accept: application/json' \
  -H 'Authorization: Bearer <access_token>'

const accessToken = process.env.QASHIO_ACCESS_TOKEN;

const response = await fetch('https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20', {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: `Bearer ${accessToken}`,
  },
});

if (!response.ok) {
  throw new Error(`Qashio API ${response.status}: ${await response.text()}`);
}

const { data, meta } = await response.json();
console.log(meta.request_id, data);

import https from 'node:https';

const url = new URL('https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20');

const payload = await new Promise((resolve, reject) => {
  const req = https.request(
    url,
    {
      method: 'GET',
      headers: {
      Accept: 'application/json',
      Authorization: `Bearer ${process.env.QASHIO_ACCESS_TOKEN}`,
      },
    },
    (res) => {
      let raw = '';
      res.on('data', (chunk) => (raw += chunk));
      res.on('end', () => resolve(JSON.parse(raw)));
    },
  );
  req.on('error', reject);
  req.end();
});

console.log(payload.data);

import os
import requests

url = "https://api.qashio.com/public/v1/erp/transactions"
headers = {
    "Accept": "application/json",
    "Authorization": f"Bearer {os.environ['QASHIO_ACCESS_TOKEN']}",
}

params = {
    "page": 1,
    "page_size": 20,
}

response = requests.get(url, headers=headers, params=params, timeout=30)
response.raise_for_status()

body = response.json()
print(body["meta"]["request_id"], body["data"])

<?php

$ch = curl_init('https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20');

curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_CUSTOMREQUEST  => 'GET',
  CURLOPT_HTTPHEADER     => [
      'Accept: application/json',
      'Authorization: Bearer ' . getenv('QASHIO_ACCESS_TOKEN'),
  ],
]);

$response = curl_exec($ch);
curl_close($ch);

$body = json_decode($response, true);
print_r($body['data']);

package main

import (
	"encoding/json"
	"fmt"
	"net/http"
	"os"
)

func main() {
	req, _ := http.NewRequest("GET", "https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20", nil)
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Authorization", "Bearer "+os.Getenv("QASHIO_ACCESS_TOKEN"))

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	var out map[string]any
	json.NewDecoder(res.Body).Decode(&out)
	fmt.Println(out["data"])
}

require 'net/http'
require 'json'
require 'uri'

uri = URI('https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20')
request = Net::HTTP::Get.new(uri)
request['Accept'] = 'application/json'
request['Authorization'] = "Bearer #{ENV.fetch('QASHIO_ACCESS_TOKEN')}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

body = JSON.parse(response.body)
puts body['data']

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class QashioExample {
  public static void main(String[] args) throws Exception {
    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20"))
        .header("Accept", "application/json")
        .header("Authorization", "Bearer " + System.getenv("QASHIO_ACCESS_TOKEN"))
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();

    HttpResponse<String> response = HttpClient.newHttpClient()
        .send(request, HttpResponse.BodyHandlers.ofString());

    System.out.println(response.body());
  }
}

using System;
using System.Net.Http;
using System.Threading.Tasks;

var client = new HttpClient();

var request = new HttpRequestMessage(new HttpMethod("GET"), "https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20");
request.Headers.Add("Accept", "application/json");
request.Headers.Add("Authorization", $"Bearer {Environment.GetEnvironmentVariable("QASHIO_ACCESS_TOKEN")}");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();

Console.WriteLine(await response.Content.ReadAsStringAsync());

import Foundation

var request = URLRequest(url: URL(string: "https://api.qashio.com/public/v1/erp/transactions?page=1&page_size=20")!)
request.httpMethod = "GET"
request.setValue("application/json", forHTTPHeaderField: "Accept")
let token = ProcessInfo.processInfo.environment["QASHIO_ACCESS_TOKEN"]!
request.setValue("Bearer \(token)", forHTTPHeaderField: "Authorization")

let (data, _) = try await URLSession.shared.data(for: request)
print(String(data: data, encoding: .utf8)!)

Response

{
  "status_code": 200,
  "success": true,
  "data": [
    {
      "id": "cf427cb0-c3ef-41ac-be60-da58887e68b0",
      "merchant_name": "Acme Trading LLC",
      "erp_supplier_name": "QSupplier 1",
      "expense_category_name": "Office Supplies",
      "erp_tax_rate_name": "Tax Rate - 1",
      "erp_chart_of_account_name": "Chart of account - 1",
      "pool_account_name": "Qashio Pool Account - 1",
      "card_name": "Qashio Card - 1",
      "card_holder_name": "Tom Baker",
      "card_holder_email": "lina.haddad@example.com",
      "qashio_id": "CT9tctsjf8ybcjr5",
      "transaction_amount": 2,
      "transaction_currency": "AED",
      "transaction_time": "2026-09-09T09:14:14.817Z",
      "transaction_description": "Wallet Transfer",
      "transaction_type": "wallet_transfer",
      "transaction_category": "card_loading",
      "fee_charges": 0,
      "clearing_status": "cleared",
      "billing_currency": "AED",
      "memo": "Monthly office supplies",
      "vat_amount": 0,
      "status_code": "0000",
      "message_type": "api",
      "settlement_status": "settled",
      "rrn": "6252091414Al",
      "vendor_trn": "100123456700003",
      "purchase_order_number": "PO-2026-0142",
      "parent_id": "CAj2w5b3w9hoe0ga",
      "parent_qashio_id": "TXN-PARENT-001",
      "visible": true,
      "cleared_at": "2026-08-06T07:30:44.941Z",
      "exclude_from_sync": false,
      "client_sync_status": "not_synced",
      "erp_sync_status": "not_validated",
      "erp_sync_type": "automatic",
      "approval_status": "approved",
      "merchant_city": "Dubai",
      "merchant_country": "AE",
      "mcc_code": "5812",
      "mcc_description": "Eating Places and Restaurants",
      "company_id": "COoyy0mfzqhxtxkkk",
      "supplier_qashio_external_id": "CAj2w5b3w9hoe0ga",
      "chart_of_account_qashio_external_id": "CAj2w5b3w9hoe0ga",
      "erp_supplier_remote_id": "CAj2w5b3w9hoe0ga",
      "erp_tax_rate_remote_id": "CAj2w5b3w9hoe0ga",
      "erp_chart_of_account_remote_id": "CAj2w5b3w9hoe0ga",
      "chart_of_account_number": "sample",
      "pool_external_id": "CAj2w5b3w9hoe0ga",
      "card_external_id": "CAj2w5b3w9hoe0ga",
      "card_last_four": "sample",
      "employee_id": "EMP-1001",
      "erp_supplier": "sample",
      "erp_chart_of_account": "6100",
      "billing_amount": 0,
      "clearing_amount": 0,
      "approved_date_time": "sample",
      "modified_date": "2026-09-09T09:14:16.999Z",
      "approved_by": "sample",
      "updated_at": "2026-09-09T09:20:45.265Z",
      "created_at": "2026-09-09T09:20:42.109Z",
      "sync_errors": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ],
      "segments": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ],
      "receipts": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ],
      "line_items": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ]
    }
  ],
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  },
  "pagination": {
    "page": 1,
    "page_size": 20,
    "total_pages": 1,
    "total_records": 7,
    "has_next": false,
    "has_previous": false
  }
}

{
  "status_code": 401,
  "success": false,
  "message": "Missing Bearer token",
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Missing Bearer token"
  },
  "errors": [
    {
      "code": "UNAUTHORIZED",
      "message": "Missing Bearer token",
      "field": "authorization"
    }
  ],
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  }
}