Skip to main content

How do I create an access token?

An access token lets an external tool, for example accounting software, read some of your Malt data. You create it in My account, then copy it into the tool. Malt shows it only once.

In summary:
  • Open My account, then API Keys.
  • Generate a token with the READ_INVOICE permission for a tool that imports your invoices.
  • Copy it straight away. If it is no longer shown, generate a new one: the page shows it only once.

Where to create it

  1. Open My account.
  2. Choose API Keys. The page is titled Authentication Access.
  3. Click Generate token.
  4. Under Token type, leave Account.
  5. Under Permissions, select READ_INVOICE. This is read access to your invoices. For a tool that imports your invoices, this permission is enough.
  6. Fill in Token name. The name of the tool works well.
  7. Note (optional) can be left empty.
  8. Click Generate.
  9. Copy the token immediately. The page says: “Be sure to copy your new access token now. You won't be able to see it again!”

The screen shows the code READ_INVOICE, not a phrase such as “Read invoices”.

Paste it into the tool

Paste the token into the tool, where it asks you to connect to Malt. Paste it in full, with no space before or after.

If you closed the window before copying it, generate a new one, then delete the one you could not copy. A new token is enough in this case.

If the tool rejects the token

The reason for the rejection is shown in the tool, not on Malt.

  1. Check that the pasted token is complete, with no space before or after.
  2. Check that the READ_INVOICE permission is selected.
  3. If needed, generate a new token with this permission, and paste that one.

If the tool still rejects this new token, contact Malt support. Give the token name, its creation date and the message shown by the tool. Do not send the token.

When to contact support

Contact support in two cases.

  • The page shows: “An unexpected error occurred, the access token couldn't be created.”
  • A tool rejects a token you have just generated, while READ_INVOICE is selected and the token was pasted in full.

Give the token name, the date and the message shown by the tool. Do not send the token: it gives access to your invoices.

If the token is no longer shown, you can generate a new one yourself. The page shows it only once.

Related articles