Konto Agent API (1.0.0)

Send the user's browser here. They sign in to Konto, review the requested scopes, and are redirected back to redirect_uri with a short-lived authorization code (10-minute TTL) and your state.

PKCE: if you send a code_challenge, only S256 is accepted. Public clients (no client_secret) must send one. redirect_uri must match the value registered for the client exactly.

Exchange an authorization code (with grant_type=authorization_code) or a refresh_token (with grant_type=refresh_token) for an access token. Refresh tokens rotate — persist the new refresh_token from every response. Refresh does not require redirect_uri.

Create an agent client and receive a client_id + client_secret (the secret is shown once). In practice Konto often provisions clients — especially shared app clients (one client many merchants authorize) — manually; contact Konto for onboarding.

Returns the connected company name, registration number (kennitala) and username. The MCP also derives the environment from the host.

The agent clients currently authorized on this account, with granted scopes and timestamps.

Immediately invalidates that client's tokens. Irreversible. Revoking the client you are currently using cuts off your own access.

Recent actions taken by agent clients on this account. See the in-app reference for the record shape.

Search matches name, kennitala or email. Note: results include deactivated profiles — filter client-side if needed. To look up by kennitala exactly, use ?kennitala=<kt>.

Does not dedupe by kennitala — each call creates a new profile. To change an existing one, GET it then PUT. Returns the created customer incl. its guid.

Send the fields you want to change. GET first if you need to preserve existing values. PUT bodies must be application/json.

Catalogue product/service. tax defaults to Z (0 %) if omitted — set S or AA for taxable items.

Creates and issues an invoice — Konto delivers it to the customer per their delivery setting. amount must equal Σ(line items) + VAT. For a credit note, send type: credit + ref_invoice_guid (the original is marked credited and its customer is inherited).

Updates only the bookkeeping accounting status (and an optional message). It cannot edit amounts, dates, line items or the customer.

A template that auto-generates invoices on a schedule. Same amount/line-item and date rules as a normal invoice.

Records return oldest-first — pass from_date for "recent" queries. Heavy file/xml fields are omitted from lists; fetch a single cost for them.

Upload a receipt/invoice image or PDF (multipart/form-data, max 5 MB) for Konto's AI to extract amount, supplier, VAT and cost code. When Cost AI is enabled the record is queued (result.queue = true) — re-fetch the cost to read extracted fields. If you already have the numbers, use /costs/advanced instead.

Record a cost from numbers you already have. File attachment optional. For a credit note set credit_note: 1 and keep amount positive.

Updates only the accounting status (Created/Posted/Skipped/Error) + optional message. Posted is terminal. To edit a Created cost's data, move it to New first, then re-approve.

Permanent and irreversible. Prefer status Skipped to exclude from bookkeeping. Posted costs cannot be deleted.

Moves an approved (Created), non-Posted cost back to New so it can be edited; re-approving regenerates its bookkeeping XML.

A task linked to a customer, with an associated (existing or inline) item.

Each log entry carries the task-LOG guid needed by the log edit/delete endpoints.

Stops the running timer. Send adv: 1 with date/h/p to record a specific dated time entry instead.

Takes the task-LOG entry's guid (from a task's log list), not the task's guid.

Irreversible. Takes the task-LOG entry's guid, not the task's guid.

Read-only. Each result has a sale type: STAND, SUB, DONA, EVENT. Only EVENT sales have attendees.

The guid must belong to an EVENT-type sale.