Authentication Overview

You can access the Stitch API by using two types of access tokens: User Tokens and Client Tokens. All API calls to Stitch need to include one of these access tokens. The use cases for each are outlined below.

Client Tokens

Client tokens are needed to perform actions that are not linked to a user (e.g. bank account verification, creating payment requests, checking the status of a payment request). For more details, see the client tokens guide.

User Tokens

A user token is needed for any data retrieval or payment actions associated with a user's bank account. User Tokens represent authorization to perform certain actions on a user's bank account e.g. query accounts, transactions, balances etc. For more details see the user tokens guide.