Request Bank Account Sync

Requests a bank lookup for every connected bank account. The API only accepts the request with 202 Accepted, and the bank lookup runs asynchronously. Bolta fetches transactions periodically, so request a sync only when you need the latest transactions sooner. Check progress with syncStatus in the account list. When IN_PROGRESS ends, continue fetching transactions with your saved cursor.

Each business can request a sync once every 30 minutes and up to 12 times in 24 hours. A request rejected because a sync is already running (409) does not count toward the limit. Test keys use no quota and return only the acceptance response. Bank account transactions guide

POST

bankAccounts:sync

curl --request POST \
  --url https://xapi.bolta.io/v1/bankAccounts:sync \
  --header 'Authorization: Basic <encoded-value>'

const options = {method: 'POST', headers: {Authorization: 'Basic <encoded-value>'}};

fetch('https://xapi.bolta.io/v1/bankAccounts:sync', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://xapi.bolta.io/v1/bankAccounts:sync",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Basic <encoded-value>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://xapi.bolta.io/v1/bankAccounts:sync"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Basic <encoded-value>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://xapi.bolta.io/v1/bankAccounts:sync")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Basic <encoded-value>'

response = http.request(request)
puts response.read_body

{
  "acceptedAt": "2026-09-18T03:00:00Z",
  "nextAvailableAt": "2026-09-18T03:30:00Z"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

Authorizations

Authorization

string

header

required

Append a colon to your API key, Base64-encode it, and put it in the header. Enter the API key as the username and leave the password empty.

Response

Request accepted

Sync request acceptance result

acceptedAt

string<date-time>

required

Time the request was accepted (UTC)

nextAvailableAt

string<date-time>

required

Earliest time the next request clears the 30-minute interval (UTC). Does not reflect the 12-per-24-hours limit.

Request Bank Account Sync

curl --request POST \
  --url https://xapi.bolta.io/v1/bankAccounts:sync \
  --header 'Authorization: Basic <encoded-value>'

const options = {method: 'POST', headers: {Authorization: 'Basic <encoded-value>'}};

fetch('https://xapi.bolta.io/v1/bankAccounts:sync', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://xapi.bolta.io/v1/bankAccounts:sync",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Basic <encoded-value>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://xapi.bolta.io/v1/bankAccounts:sync"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Basic <encoded-value>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://xapi.bolta.io/v1/bankAccounts:sync")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Basic <encoded-value>'

response = http.request(request)
puts response.read_body

{
  "acceptedAt": "2026-09-18T03:00:00Z",
  "nextAvailableAt": "2026-09-18T03:30:00Z"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

{
  "code": "<string>",
  "message": "<string>",
  "traceId": "<string>"
}

Tax Invoice Issuance

Reverse Issuance

Issuer

Certificate

Tax Invoice Retrieval

Cash Receipt

Business Registration Status

Revenue and Expense

Bank Account Transactions

Bank Account Holder

Document Issuance

Request Bank Account Sync

Authorizations

Response