When building an external app (such as a third-party tool) that accesses Receipt Roller data with the user's permission, register an OAuth 2.0 app.

Registering an OAuth app

• Open "Developer" → "OAuth Apps" from the business account management screen
• From "Register New," enter the app name, redirect URI, and required scopes
• Once registered, a Client ID and Client Secret are issued

Scopes

Register only the permissions your app actually needs. We recommend not attaching unnecessary permissions. Scopes can be changed later, but this may require re-consent.

Handling the client secret

• The client secret is shown only once, immediately after issuance. Store it somewhere secure
• Do not write it into public repository or client-side code
• If you suspect a leak, reissue it immediately

Detailed developer information

For the authorization code flow, the token endpoint, and how to handle refresh tokens, see the developer help.

https://receiptroller.io/en/developer/help

Related articles

• Developer API overview
• API keys and client secrets