List organizations

Returns a paginated list of organizations that the authenticated admin user has permission to administer. Results can be filtered by name, sorted, and paginated. When the account has several persons linked to it, organizations administered by any of those persons are returned by default; set linkedOrgs=false to restrict the list to the logged in person only. The list also holds the template organizations the caller administers through a partner, usable as templateOrganizationId when creating an organization. A template organization carries no employees, partner or design, so design comes back empty and meta is left out for it.

GET

organizations

List organizations

curl --request GET \
  --url https://stage-api.findity.com/api/v1/admin/organizations \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://stage-api.findity.com/api/v1/admin/organizations', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://stage-api.findity.com/api/v1/admin/organizations",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://stage-api.findity.com/api/v1/admin/organizations"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://stage-api.findity.com/api/v1/admin/organizations")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "meta": {
    "count": 1,
    "total": 1
  },
  "data": [
    {
      "id": "11adfe2a080040e3892ffb89c21ec44e",
      "externalSourceId": "ext-acme-001",
      "name": "Example Ltd.",
      "vat": "123456-1234",
      "phone": "+46701234567",
      "status": "NORMAL",
      "type": "COMPANY",
      "dateCreated": "2024-01-15T09:30:00Z",
      "lastUpdated": "2024-06-01T14:22:00Z",
      "clientApplicationId": "ca1234567890abcdef1234567890abcd",
      "personId": "8ab28c4f84d89c570184e1da2bf10540",
      "reportReviewOnPartner": false,
      "sendEventToExternalSystemPartnerLevel": false,
      "sendEventToExternalSystem": false,
      "automaticSetupEnabled": true,
      "automaticSetupCompleted": false,
      "supportAccessEndDate": null,
      "policyUrl": null
    }
  ]
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Query Parameters

include

string

String. Comma-separated list of optional data sections to include in the response. Accepted values: address, invoiceDetails, settings, design, partner, meta.permissions.

Example:

"design,meta.permissions"

linkedOrgs

boolean

default:true

Boolean. When true (default), the list contains organizations administered by any person linked to the authenticated account. When false, only organizations administered by the logged in person are returned. Any value other than false is treated as true.

Example:

false

searchText

string

String. Case-insensitive partial-match filter on organization name. When omitted, all administrable organizations are returned.

Example:

"Acme"

sort

string

default:name:asc

String. Comma-separated list of sorting criteria in property:direction format, where direction is asc or desc. Supported sort properties: name, dateCreated, lastUpdated, status. Example: name:asc,dateCreated:desc. When omitted, results default to name:asc.

Example:

"name:asc"

max

integer<int>

default:10

max records to return

Required range: 1 <= x <= 1000

offset

integer<int>

default:0

the offset to be used in list

Required range: x >= 0

Response

meta

object

required

Hide child attributes

meta.count

integer

required

Number of organizations returned in this response page.

meta.total

integer

required

Total number of organizations matching the query across all pages.

data

object[]

required

Hide child attributes

data.id

string

required

Unique internal identifier of the organization. 32-character hex string. Read-only; assigned by the server on creation.

Pattern: ^[0-9a-fA-F]{32}$

data.name

string

required

Display name of the organization.

data.status

enum<string>

required

Lifecycle status of the organization.

Available options:

NORMAL,

NEW,

INCOMPLETE

data.dateCreated

string<date-time>

required

ISO 8601 timestamp of when the organization was created.

data.lastUpdated

string<date-time>

required

ISO 8601 timestamp of when the organization was last modified.

data.reportReviewOnPartner

boolean

required

Whether expense report review is delegated to partner level rather than handled within this organization.

data.sendEventToExternalSystemPartnerLevel

boolean

required

Whether events are forwarded to the external system at partner level (rather than organization level).

data.sendEventToExternalSystem

boolean

required

Whether events from this organization are sent to the external system.

data.externalSourceId

string | null

Caller-supplied identifier used to address this organization from an external system. Null when no external source ID has been set.

data.vat

string | null

Organization registration number (VAT/company number).

data.phone

string | null

Main phone number of the organization. Null when no phone number has been set.

data.type

enum<string>

read-only

What kind of organization this is. COMPANY is a real organization, TEMPLATE is a template organization usable as templateOrganizationId when creating one. Template organizations have no employees, partner or design, so design comes back empty and meta is left out for them.

Available options:

COMPANY,

TEMPLATE

data.clientApplicationId

string

ID of the client application (partner integration) that created this organization.

data.personId

string

ID of the person that administers this organization. When several persons are linked to the authenticated account, this is the specific person holding the administrator role for this organization, which is not necessarily the logged in person. Falls back to the logged in person when no separate person is found.

Pattern: ^[0-9a-fA-F]{32}$

data.automaticSetupEnabled

boolean | null

Whether the organization is set up automatically from its partner template. Always present, and null when the flag has never been set.

data.automaticSetupCompleted

boolean | null

Whether the automatic setup has finished. Always present, and null when the flag has never been set; a client that drives onboarding treats enabled and not completed as setup still pending.

data.supportAccessEndDate

string<date-time> | null

ISO 8601 timestamp until which Findity support staff has elevated access to this organization. Null when no support access window is active.

data.policyUrl

string | null

Pre-signed URL to the organization's active policy document. Null when no policy document is configured.

data.address

object | null

Postal address of the organization. Only present when include=address is requested. Null when the organization has no address on record.

Hide child attributes

data.address.street1

string | null

First line of the street address.

data.address.city

string | null

City name.

data.address.postalCode

string | null

Postal or ZIP code.

data.address.countryName

string | null

Full country name.

data.address.countryIso2Code

string | null

ISO 3166-1 alpha-2 country code (2-letter uppercase, e.g. SE).

data.invoiceDetails

object | null

Invoice address and billing contact. Only present when include=invoiceDetails is requested. Null when the organization has no invoice details on record.

Hide child attributes

data.invoiceDetails.street1

string | null

First line of the invoice street address.

data.invoiceDetails.city

string | null

City name.

data.invoiceDetails.postalCode

string | null

Postal or ZIP code.

data.invoiceDetails.countryName

string | null

Full country name.

data.invoiceDetails.countryIso2Code

string | null

ISO 3166-1 alpha-2 country code (2-letter uppercase, e.g. SE).

data.invoiceDetails.emailAddress

string | null

Email address for invoice delivery.

data.settings

object

Organization-specific configuration settings. Only present when include=settings is requested. Empty object when the organization has no custom settings configured.

data.design

object

Branding and visual design configuration for this organization, resolved by merging client application, partner and organization level design. Only present when include=design is requested. Empty object when the organization has no custom design configured.

Hide child attributes

data.design.accentColor

string

Hex color code, either three or six digits (e.g. #1A73E8).

Pattern: ^#([0-9A-Fa-f]{3}|[0-9A-Fa-f]{6})$

data.design.darkAccentColor

string

Hex color code, either three or six digits (e.g. #0B4FA8).

Pattern: ^#([0-9A-Fa-f]{3}|[0-9A-Fa-f]{6})$

data.design.secondaryAccentColor

string

Hex color code, either three or six digits. Defaults to accentColor when not configured.

Pattern: ^#([0-9A-Fa-f]{3}|[0-9A-Fa-f]{6})$

data.design.secondaryDarkAccentColor

string

Hex color code, either three or six digits. Defaults to darkAccentColor when not configured.

Pattern: ^#([0-9A-Fa-f]{3}|[0-9A-Fa-f]{6})$

data.design.textOnAccentColor

string

Six digit hex color code, always #FFFFFF or #000000. Derived from accentColor for readable text on that background.

Pattern: ^#[0-9A-Fa-f]{6}$

data.design.textOnDarkAccentColor

string

Six digit hex color code, always #FFFFFF or #000000. Derived from darkAccentColor for readable text on that background.

Pattern: ^#[0-9A-Fa-f]{6}$

data.design.textOnSecondaryAccentColor

string

Six digit hex color code, always #FFFFFF or #000000. Derived from secondaryAccentColor for readable text on that background.

Pattern: ^#[0-9A-Fa-f]{6}$

data.design.textOnSecondaryDarkAccentColor

string

Six digit hex color code, always #FFFFFF or #000000. Derived from secondaryDarkAccentColor for readable text on that background.

Pattern: ^#[0-9A-Fa-f]{6}$

data.design.logoUrl

string<uri>

URL to the organization logo.

URL to the logo used in the menu.

data.design.iconUrl

string<uri>

URL to the organization icon.

data.partner

object | null

Partner affiliation details. Only present when include=partner is requested. Null when the organization has no partner association.

Hide child attributes

data.partner.partnerId

string | null

External ID of the partner.

data.partner.partnerName

string | null

Display name of the partner.

data.partner.partnerCode

string | null

Short code identifying the partner.

data.partner.payedByPartner

boolean | null

Whether this organization's Findity subscription is paid by the partner.

data.meta

object

Additional computed data about the organization. Only present on GET /organizations when include=meta.permissions is requested. This is per-organization metadata and is unrelated to the list level meta object that carries count and total. The name follows the include=meta.* convention used across the Findity APIs, and matches the same field on GET /v1/expense/me/organizations. Left out for template organizations, which cannot have an employee and therefore no permissions to report.

Hide child attributes

data.meta.permissions

object | null

What the authenticated user is allowed to do in this organization. Null when permissions cannot be resolved for the organization.

Hide child attributes

data.meta.permissions.canAddCard

boolean

If user can connect new credit cards.

data.meta.permissions.canViewExpenses

boolean

If user can view expenses, i.e. is an employee of an organization.

data.meta.permissions.canApprove

boolean

If user can approve expenses in the organization.

data.meta.permissions.canCreateExpense

boolean

If user can create expenses.

data.meta.permissions.canCreateReport

boolean

If user can create expense reports.

data.meta.permissions.canSendExpenses

boolean

If user can send in single expenses.

data.meta.permissions.canSendReports

boolean

If user can send expense reports.

data.meta.permissions.canDeleteAccount

boolean

If user is allowed to delete the account.

data.meta.permissions.canAdminister

boolean

If user has administration rights for the organization, allowing them to manage organization settings, members, and related configuration.

Last modified on August 31, 2026

⌘I

List organizations

curl --request GET \
  --url https://stage-api.findity.com/api/v1/admin/organizations \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://stage-api.findity.com/api/v1/admin/organizations', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://stage-api.findity.com/api/v1/admin/organizations",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://stage-api.findity.com/api/v1/admin/organizations"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://stage-api.findity.com/api/v1/admin/organizations")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "meta": {
    "count": 1,
    "total": 1
  },
  "data": [
    {
      "id": "11adfe2a080040e3892ffb89c21ec44e",
      "externalSourceId": "ext-acme-001",
      "name": "Example Ltd.",
      "vat": "123456-1234",
      "phone": "+46701234567",
      "status": "NORMAL",
      "type": "COMPANY",
      "dateCreated": "2024-01-15T09:30:00Z",
      "lastUpdated": "2024-06-01T14:22:00Z",
      "clientApplicationId": "ca1234567890abcdef1234567890abcd",
      "personId": "8ab28c4f84d89c570184e1da2bf10540",
      "reportReviewOnPartner": false,
      "sendEventToExternalSystemPartnerLevel": false,
      "sendEventToExternalSystem": false,
      "automaticSetupEnabled": true,
      "automaticSetupCompleted": false,
      "supportAccessEndDate": null,
      "policyUrl": null
    }
  ]
}

Authentication

Findity Expense API

Findity Admin API

Findity Connect API

List organizations

Authorizations

Query Parameters

Response