Getting API access

Contract

In order to get access to our services and the API, you need to have a signed contract with Kontomatik, which includes a data processing agreement.

For the test environment, we sign a simpler version of the contract that contains basic provisions for a testing or a PoC phase of your implementation. In some cases, the test agreement doesn’t include a data processing part when you only wanna work with mock data.

Once you’ve concluded your tests, we can sign the main contract that will have more provisions, a detailed description of the services provided and pricing. In this case, a data processing agreement is mandatory.

In most cases, the main contract is the first document to be negotiated and the test agreement is signed only to begin integration before the negotiations conclude and the main contract is signed.

If you’re interested in our API, you can contact our Sales Team to request a demo and pricing details.

Insight

Whenever an agreement with Kontomatik is signed, we create a test account or test and production account, depending on the agreement scope.

Next, a person from your organization will receive an invitation to our customer portal, Insight. That person will have the admin rights to manage your client account, enable API access and invite other users.

API access

To enable API access you need to configure two things in Insight: IP addresses of your servers and generate API key(s).

You need static IP addresses to be able to connect with Kontomatik services.

You can generate multiple API keys that will work simultaneously, depending on your needs you might want to use each one for a different service or system.

If any of your API keys gets leaked, you will need to replace them as soon as possible. In case we detect that one of your API keys got leaked, we will contact you to inform you about it and give you a few days to replace it. After the given time we will remove the leaked key, possibly denying you access to our services if you haven’t created a new one and added it to your integration.

Once that’s all configured, you will be able to perform API actions from the whitelisted servers passing an API key in a request header.