PocketSmith
Connect your client's PocketSmith with a sign-in, and call its API through Operate As.
- Website
- pocketsmith.com
- Connects by
- Signing in with PocketSmith
- Category
- Accounting
- Services
- 1
- Tools
- 56
| Service | Key | Base URL |
|---|---|---|
| PocketSmith | pocketsmith | https://api.pocketsmith.com/v2 |
Connecting
Your client presses Connect on their link and approves on PocketSmith's own screen. Operate As never sees their password.
curl https://api.operate.as/v1/me/clients \ -H "Authorization: Bearer $OPERATE_AS_API_KEY"[ { "id": "6f1c2a7e-...", "name": "Miller Dental", "services": [ "pocketsmith" ] }]Permissions
| What the client reads | Permission it asks for |
|---|---|
| Access to list and view transaction accounts | accounts.read |
| Access to update and delete transaction accounts | accounts.write |
| Access to view attachments | attachments.read |
| Ability to create, update and delete attachments | attachments.write |
| Access to view categories | categories.read |
| Ability to edit and delete categories | categories.write |
| Access to view events | events.read |
| Ability to create, update and delete events | events.write |
| Access to list and view accounts and transactions | transactions.read |
| Access to create, update and delete transactions | transactions.write |
| Access the user's details and preferences | user.read |
| Access to change the user's details and preferences | user.write |
Tools
Install PocketSmith's typed package for your language:
pip install operate-as-pocketsmithpocketsmith.delete_accounts_idcurl -X POST https://api.operate.as/v1/actions/pocketsmith.delete_accounts_id \ -H "Authorization: Bearer $OPERATE_AS_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "clientId": "6f1c2a7e-...", "input": { "id": "<id>" } }'Shows the required inputs. Every input, with its JSON Schema: GET /v1/actions/pocketsmith.delete_accounts_id
{ "status": 200, "data": { "…": "the service's own response" }, "encoding": "json"}Pass-through
Paths continue from https://api.pocketsmith.com/v2. Your Operate As key goes in Authorization; the client's access is added for you.
See Pass-through requests for the full request and response format.
curl "https://api.operate.as/v1/clients/6f1c2a7e-.../pocketsmith/..." \ -H "Authorization: Bearer $OPERATE_AS_API_KEY"{ "status": 200, "data": { "…": "the service's own response" }, "encoding": "json"}When access ends
Operate As renews the sign-in before it runs out and checks it daily. If PocketSmith refuses to renew it, the service shows Expired, you're alerted, and your client reconnects from the same link.
See Keeping access alive and Removing access.
HTTP/1.1 409 ConflictContent-Type: application/json{ "detail": "Miller Dental's PocketSmith access ended. Send them their link to reconnect."}{ "id": "evt_3f9a1c…", "type": "connection.expired", "createdAt": "2026-10-16T08:00:00+00:00", "data": { "clientId": "6f1c2a7e-...", "clientName": "Miller Dental", "provider": "pocketsmith", "services": [ "pocketsmith" ], "reconnectUrl": "https://…" }}