Get a connection
Look up a Connection by id. The status field tells you
where it is in its lifecycle and last_error carries any
recent failure details.
Authorizations
Pass your secret key in the Authorization header as a Bearer
token: Authorization: Bearer sk_test_... (sandbox) or
Bearer sk_live_... (production).
Keys are created in the developer portal and the plaintext secret is shown exactly once at creation. Treat them like passwords — never embed them in mobile apps or front-end code.
Path Parameters
Canonical Connection id of the form con_<SOURCE>_<bankAccountId>
(e.g. con_FINICITY_41294, con_MX_1224, con_FDE_5009). Only
the canonical shape is accepted here. The placeholder UUID id
returned by POST /v3/clients/{id}/connections
(con_<uuid>, e.g. con_01HXYZ8A6N7K2W9PQ4T5Z3V6E0) is not
a valid value — calls with it return 400 with
missing source separator. See the lifecycle prose at the top
of this document for the full id-format contract.
"con_FINICITY_41294"
Query Parameters
The Client (cli_…) to scope the read to. Required on account,
transaction, and statement reads — LedgerSync's backend data APIs
are scoped per end-user, so these resources are resolved within a
single Client.
Response
The Connection.
Connection identifier. Two shapes can appear depending on lifecycle state:
con_<uuid>— placeholder id surfaced during theconnection_with_actionresult while the connection ispending. Used only to route the widget step. CallingGET /v3/connections/{placeholder_uuid}returns 400 withmissing source separator.con_<SOURCE>_<bankAccountId>— canonical id once the connection reachesactive. Every other endpoint (/accounts,/transactions,/statements, refresh, delete) expects this form.
See the lifecycle prose at the top of this document.
"con_FINICITY_41294"
"cli_01HXYZ8A6N7K2W9PQ4T5Z3V6E0"
Financial-data source backing a connection. All sources wrap upstream aggregators or extraction pipelines.
Values:
FINICITY— Finicity aggregationMX— MX aggregationFDE— Financial Document Extraction (LedgerSync proprietary)
FINICITY, MX, FDE Connection lifecycle status.
initiated— Connection started, waiting for end-user or upstream to completerequires_action— Awaiting MFA or reauthorization from the end-useractive— Healthy, refreshing on schedulefailed— Connection failed; reviewlast_errordisconnected— End-user revoked or LedgerSync disconnected
initiated, requires_action, active, failed, disconnected The inner error payload. Used as the top-level body of an
HTTP error response (wrapped in ErrorEnvelope) and as the
embedded error field on resources that record a failure
(like Operation.error).
Catalog-derived promise for each capability we may deliver
on this connection. Plaid-style 4-tier:
always/usually/sometimes/never. Set when the
connection enters active and refreshed when the underlying
catalog row changes. Phase 1 emits only always/never
(per-FI tiering uses a profile catalog scheduled for Phase 2).
Observed outcome of the most recent attempt at each
capability. Rolled-up across the connection's accounts —
worst-status-wins per capability. See
RealizedCapabilities for the per-capability shape.
Observable-only debug metadata. Do not parse, do not branch
routing on these values. Fields under _debug may be removed,
renamed, or hashed at any time. Use the documented
realized_capabilities and last_error blocks for capability
and failure data.
