entityId.
Before you create a connection, you need:
- An owning entity from Entities
- Either a target institution from Institutions or a raw bank
portalUrl
POST /v1/connections.
Connection kinds
| Kind | Meaning |
|---|---|
setup | A setup-stage connection that still needs delegated-user onboarding or activation work. |
ready | A live connection that can surface accounts and transactions and can be synced. |
POST /v1/connections returns a ConnectionResource, which may be either kind="setup" or kind="ready". New connections return setup details when delegated-user onboarding is still required. Existing connections may be returned directly with 200 OK.
Creation modes
You can create or return a connection in two ways:| Input mode | When to use it |
|---|---|
institutionId | Preferred path when the institution is already supported in the public catalog. |
portalUrl | Fallback path when the institution is not yet supported or when you want Waycore to add support later. |
portalUrl alongside institutionId to anchor the connection to the correct portal.
Setup lifecycle
- Create or return the connection with
POST /v1/connectionsusingentityIdplus eitherinstitutionIdorportalUrl. - If the response is
kind="setup", show the setup details returned on thesetupobject to the end user or your operations team. - Provide credentials with
PUT /v1/connections/{connectionId}/credentials. - Mark setup complete with
PUT /v1/connections/{connectionId}/setupCompletiononce the bank-side delegated user is ready. - Poll or fetch the connection with
GET /v1/connections/{connectionId}until it transitions tokind="ready". - If the response is already
kind="ready", start reading data or queue a sync immediately.
Status lifecycle
| Status | Meaning |
|---|---|
draft | The setup-stage connection exists, but onboarding inputs are still incomplete. |
pendingActivation | Bank-side setup is complete and Waycore is validating or activating the connection. |
active | Syncing normally. |
reauthRequired | Credentials or bank authentication need attention before sync can continue. |
errored | A recoverable issue is preventing sync. Waycore will address and retry automatically. |
paused | Syncing has been intentionally suspended. This is typically used for maintenance. |
revoked | Access has been removed. No further syncs will occur. |
connection.status_changed webhook.
Setup-stage fields
institutionId— Waycore’s canonical identifier for the institution, when already known.portalUrl— Normalized portal URL used as the connection anchor, when available.setup.instructions— Structured delegated-user profile details, such as name, address, email, phone number, and provisioning statuses.setup.credentialsPresent— Whether working credentials have already been submitted.setup.nextAction— The next step in the setup flow, such ascreateDelegatedUser,provideCredentials, oractivateConnection.setup.actionRequiredBy— Who needs to do the next step: the end user, the integrator, or Waycore.
Ready-connection fields
entityId— Stable identifier for the business that owns the connection.portalUrl— Normalized portal URL used as the connection anchor, when available.lastSyncedAt— When data was last successfully refreshed. Useful for freshness indicators once the connection is ready.errorCode/errorMessage— Present when the connection has degraded or needs reauthentication.
Listing and filtering
GET /v1/connections returns results newest first and supports filtering by:
statusinstitutionIdentityId
GET /v1/connections/{connectionId} to fetch the latest shape for a single connection during setup or after activation.
Syncing
PUT /v1/connections/{connectionId}/sync queues an asynchronous sync for a kind="ready" connection and returns 202 Accepted when the job is queued.
Expect 409 Conflict when:
- The connection is still in setup
- A sync is already in progress
- A sync was triggered very recently and is still in cooldown
transactions.sync_available.
Deleting a connection
DELETE /v1/connections/{connectionId} performs a hard delete of the public connection plus any accounts and transactions tied to it.
Use it carefully:
- The delete is destructive.
- Downstream mirrors should treat the connection and all associated records as removed.
- You may receive
409 Conflictwhen the connection cannot currently be represented through the requested public contract.
Endpoints
Create connection
List connections
Get connection
Update credentials
Complete setup
Sync connection
Delete connection
Required scopes
| Scope | Used by |
|---|---|
connections:write | Create, update credentials, complete setup, sync, delete |
connections:read | List, get |