# Rho API

Programmatic access to Rho's banking, spend, and treasury primitives -
accounts, cards, payments, and the transaction ledger.

All endpoints take a bearer token in the `Authorization` header. See
the [Authentication](/docs/v1/auth) and [Pagination](/docs/v1/pagination)
guides to get started. Errors follow
[RFC 9457 problem details](https://www.rfc-editor.org/rfc/rfc9457.html);
timestamps are ISO 8601 UTC; monetary amounts are integers in the
smallest currency unit.

v1 is stable and additive-only: changes are backward compatible and
breaking changes require a new API version. See the
[versioning policy](/docs/v1/versioning).


Version: 1.0.0

## Servers

Production
```
https://rhoapi.rho.co/api/v1
```

Sandbox
```
https://rhoapi-sandbox.rho.co/api/v1
```

## Security

### AccessToken

[object Object]

Type: oauth2
Token URL: https://app.rho.co/settings/access-tokens
Scopes:
- `accounts:read`: Read access to business accounts information
- `cards:read`: Read access to business cards information
- `invoicing:read`: Read access to Invoicing information
- `statements:read`: Read access to business statements information
- `transactions:read`: Read access to business transactions information


## Accounts

 - [GET /accounts](https://docs.rho.co/api/v1/openapi/accounts/listaccounts.md): Returns a paginated list of accounts for the authenticated business
 - [GET /accounts/{account_id}](https://docs.rho.co/api/v1/openapi/accounts/getaccount.md): Returns a single account by its identifier
## Cards

 - [GET /cards](https://docs.rho.co/api/v1/openapi/cards/listcards.md): Returns cards belonging to the authenticated business. Canceled and expired cards remain available in unfiltered lists so their stable IDs can be joined to historical transactions. `spending_limit_typ
 - [GET /cards/{id}](https://docs.rho.co/api/v1/openapi/cards/getcard.md): Returns one card belonging to the authenticated business by its stable ID. `spending_limit_type`: How the spending limit is enforced. High utilization means the next charge can decline. `daily`, `week
## Transactions

 - [GET /transactions](https://docs.rho.co/api/v1/openapi/transactions/listtransactions.md): Returns a paginated list of transactions
 - [GET /transactions/{id}](https://docs.rho.co/api/v1/openapi/transactions/gettransaction.md): Returns a single transaction by its global identifier
 - [GET /transactions/{transaction_id}/files/{file_id}](https://docs.rho.co/api/v1/openapi/transactions/gettransactionfile.md): Returns file metadata and a fresh, short-lived signed download URL.
## Statements

 - [GET /statements](https://docs.rho.co/api/v1/openapi/statements/liststatements.md): Returns a paginated list of finalized statements for the authenticated business, newest close date first. Spans all statement types and all accounts in one aggregated surface. The account_id filter se
 - [GET /statements/{id}](https://docs.rho.co/api/v1/openapi/statements/getstatement.md): Returns a single statement by its global identifier
## Invoicing

 - [GET /invoicing/customers](https://docs.rho.co/api/v1/openapi/invoicing/listinvoicingcustomers.md): Returns a paginated list of customers for the authenticated business. Deleted customers are excluded unless include_deleted is true.
 - [GET /invoicing/customers/{customer_id}](https://docs.rho.co/api/v1/openapi/invoicing/getinvoicingcustomer.md): Returns a single customer from Invoicing by ID, including deleted customers when they still exist (deleted_at is set).
 - [GET /invoicing/invoices](https://docs.rho.co/api/v1/openapi/invoicing/listinvoicinginvoices.md): Returns a paginated list of invoices for the authenticated business. Results are ordered by creation time, newest first. Ordering is not user-configurable; keep filters unchanged while paginating.
 - [GET /invoicing/invoices/{invoice_id}](https://docs.rho.co/api/v1/openapi/invoicing/getinvoicinginvoice.md): Returns a single invoice by ID.
 - [GET /invoicing/invoices/{invoice_id}/files/{file_id}](https://docs.rho.co/api/v1/openapi/invoicing/getinvoicinginvoicefile.md): Returns file metadata and a fresh, short-lived signed download URL for the file attached to the invoice. file_id must match invoice.file_id from list or get when that field is set. Fetch again wheneve