Create a sandbox public token

Mints a public token against the feed provider's sandbox so you can walk the link flow end to end without a real bank. Requires the reconciliations:write permission.

Authorization

Authorizationstringrequired

Bearer token — Send your API token in the Authorization header as Bearer <token>. Requests without a valid token are rejected with 401 Unauthorized.

Body

application/json

Every field has a default, so an empty JSON object is a valid body.

institutionIdstring

The provider's sandbox institution to pretend to link, up to 64 characters.

default: ins_109508

usernamestring

The provider's sandbox username, up to 128 characters.

default: user_good

passwordstring

The provider's sandbox password, up to 128 characters.

default: pass_good

Response

200 · A sandbox public token.

publicTokenstring

The token to post to the exchange endpoint. An opaque provider-issued value.

400 · One of the fields is longer than its limit.

401 · The access token is missing, expired, or not for this company.

403 · The caller does not hold the `reconciliations:write` permission.

Sandbox only

This is a development aid. It only works where MagicDoor is pointed at the provider's sandbox; against a production provider environment the sandbox institution and credentials are rejected.

Feed the returned publicToken straight to Exchange a public token — it skips the browser widget entirely.