Skip to main content
Partner keys are issued when your partner account is enabled. See Availability.
Every request carries your partner secret key as a bearer token:

Keys

A key is a secret for your servers. Do not put it in a browser, a mobile app or a log. Create, rotate and revoke keys from your partner dashboard; a revoked key stops working at once. Each key can be limited to the modules you use, such as payroll only.

One company per call

Every company-scoped path names the company: /v1/companies/{company_id}/…. A call works in that company and nowhere else. A company that is not on your partner account answers 404, the same as one that does not exist. Keep the id Melso returns when you create the company, or set your own external_id and look the company up with it.

What a key cannot do

A key acts for your platform, not for a person. Three kinds of decision belong to a person at the company, and no key can make them: Operations that need a person carry a A person decides notice in the reference. Calling one with a key answers 403 with code person_required. See Approvals and filing.

Errors

See Conventions for the error format.