Pennylane

At a Glance

Difficulty

⚡MODERATEPartner-Issued Credentials Required — OAuth apps are provisioned manually by Pennylane's Partnerships team (no self-service portal); otherwise a standard OAuth authorization-code connect.

Authentication

OAuth 2.0OAuth 2.0 (Authorization Code).

Webhooks

Virtual webhooks — created and updated events for customers, suppliers, invoices, invoice items and bills.

Partnership Required

Yes(OAuth Client ID and Secret are issued by Pennylane's Partnerships team after manual validation. No fee.)

Partnership Application

Developer Portal↗

Apideck Credentials

Not available(Not available — consumers supply their own partnership-issued OAuth credentials in every environment.)

Costs

No partnership or API fees; consumers need an active Pennylane subscription.

Sandbox Availability

Available(Existing accounts self-serve a developer API token for testing. OAuth partner-app credentials still require the Partnerships team. Same limits as production.)

Account Type Required

Active Pennylane account (app.pennylane.com) with at least one company set up.

Consumer Access Level

A user with permission to authorize third-party (OAuth) apps for the company.

Rate Limits

25 requests per 5 seconds per token (production and sandbox).

Responsibility matrix

Environments

Sandbox

Development and testing. If you already have a Pennylane account you can generate a developer API token yourself for testing; the OAuth Client ID and Secret your integration connects with are issued by the Partnerships team during the partnership process. Same rate limits as production.

Production

Live consumer data. Production OAuth credentials are issued by the Partnerships team after approval.

Both

Sandbox and production are separate Pennylane accounts with different credentials. Test against the sandbox account before pointing your OAuth app at production data — development credentials cannot be used with production accounts.