ChangesChangelog

Changelog

Conta Simples API change history

For conventions, versioning, and breaking change policy, see Changelog conventions.

[2026-10-08]

Fixed

  • Link receipt or invoice: route and file rules. The route is POST /attachments/v1/attachments, not POST /attachments/v1 as the reference stated. The endpoint reference now also lists the rules the upload already enforces: file.name ends with an extension accepted for file.contentType, otherwise the response is 400; and the PUT to uploadUrl carries the Content-Type header for the format, otherwise S3 rejects the upload. The 403 response, for a scope the credential wasn't granted, is now listed on the endpoint.

[2026-10-01]

Changed

  • Virtual cards (VCN): requestor as a string. Create VCN, Update VCN and Cancel VCN require requestor in the body: a 1 to 100 character string, with a user's e-mail or an identifier from your system. The { name, email, phone } object is no longer accepted. See Request body.

[2026-09-30]

🚧 Anything to do now? Not if your credential has no public key. Only credentials with a public key must sign, and the key is required to receive sensitive scopes.

Added

  • Virtual cards (VCN): get and cancel. Two new endpoints to track and close an issued VCN.
    • Get VCN (GET /credit-cards/v1/vcns/{vcnId}): returns the status, usage window and ceiling of a VCN, without the card data.
    • Cancel VCN (DELETE /credit-cards/v1/vcns/{vcnId}): closes the VCN for good; retrying the call is safe.
  • Request Signing page under Getting Started, for credentials with an asymmetric key. It explains how to generate the key pair, how to register the public key, when a signature is required, and how to sign following RFC 9421 (HTTP Message Signatures).
    • The signature covers the method, the path, the query, and the body, the last one through the Content-Digest header, and goes in the Signature-Input and Signature headers. The accepted algorithms are rsa-v1_5-sha256, rsa-pss-sha512, ecdsa-p256-sha256, and ed25519, and created is valid for 300 seconds.
    • A credential with a public key signs every call, reads included. The key is required to receive sensitive scopes, which are the write scopes and Reveal VCN card data.
    • The page has Node.js and openssl examples and shows how to check the signature on your machine before calling the API.
  • details.reason field on the signature 401 response, with the values SIGNATURE_REQUIRED and INVALID_SIGNATURE. It is documented in Request Signing.
  • details.requiredScope field on the 403 response, which says which scope the credential is missing. It is documented in Common Errors.
  • Signature-Input, Signature, and Content-Digest headers in the reference for every endpoint except token issuance, which uses Basic Auth. They also show up as fields in the playground.
  • Signing card in the playground. In Try it, below Headers, you paste the private key of a Sandbox credential and every send goes out signed. The key stays only in the tab's memory and is never stored or sent.

[2026-09-29]

Added

  • Virtual cards (VCN). Issue a restricted-use virtual card for a hotel booking (HOTEL), a flight booking (AERIAL) or a use you define (CUSTOM, e.g. one card per supplier).
    • Create VCN (POST /credit-cards/v1/vcns): issues the VCN and returns PAN, CVV and expiration.
    • Update VCN (PATCH /credit-cards/v1/vcns/{vcnId}): tops up the ceiling and adjusts the usage window of a CUSTOM VCN, without swapping the card.
    • Reveal VCN card data (GET /credit-cards/v1/vcns/{vcnId}/reveal): returns the PAN, CVV and expiration of an issued VCN again.
    • VCN guide: the types, the lifecycle and the usage window, idempotency, ceiling, retry and error rules shared by every VCN endpoint.
    • Every VCN call requires the X-Partner-Id header, which identifies the integrator platform. See Platform identification.

[2026-09-01]

Added

  • Adds the update banking transaction endpoint (PATCH /statements/v1/banking/{transactionId}): update notes, category, cost center, and reconcile a transaction on the banking statement. See reference.

[2026-08-03]

Added

  • Banking transaction receipt endpoint (GET /statements/v1/banking/{transactionId}/receipt): generates the PDF receipt of a banking transaction (PIX, TED, transfer between Conta Simples accounts, or bill payment) and returns a short-lived signed URL (5 minutes) for download. Available only for transactions with status PROCESSED (status: 2); check the transaction's showReceipt field before calling. See reference.

[2026-06-30]

Added

  • Link receipt or invoice endpoint (POST /attachments/v1): creates an attachment record linked to an existing transaction and returns a presigned URL for direct S3 upload. 2-step flow: (1) POST to get {id, uploadUrl}; (2) PUT {uploadUrl} with the file binary. The returned id is compatible with GET /attachments/v1/content/{attachmentId}. See reference.

[2026-06-29]

Added

  • List bills endpoint (GET /credit-cards/v1/bills): lists all credit card bills for the authenticated company, with an optional status filter. Amounts are in BRL. See reference.
  • Bill details endpoint (GET /credit-cards/v1/bills/{dueDate}): returns the totals (domestic, international, IOF, credits, and charges) and the items (transactions) of a specific bill, identified by its due date. See reference.

[2026-06-26]

Added

  • Get account balance endpoint (GET /accounts/v1/balance): returns the available balance for the authenticated company's account in BRL. See reference.

[2026-06-23]

Added

  • Create cost center endpoint (POST /cost-centers/v1/cost-centers): creates a new cost center for the company; name is required and must be unique per company. See reference.
  • Get cost center by ID endpoint (GET /cost-centers/v1/cost-centers/{id}): returns the data of a specific cost center by UUID. See reference.
  • Update cost center endpoint (PATCH /cost-centers/v1/cost-centers/{id}): renames an existing cost center; the new name must be unique within the company. See reference.
  • Delete cost center endpoint (DELETE /cost-centers/v1/cost-centers/{id}): deletes a cost center by UUID; returns 204 on success. See reference.

Deprecated

  • responsible field in GET /cost-centers/v1/cost-centers response: will be removed in a future version. Do not use this field in new integrations. See reference.

[2026-06-18]

Added

  • Update supplier endpoint (PUT /suppliers/v1/suppliers/{id}): updates the name of an existing company supplier; the name field is required and must be unique per company. See reference.
  • Delete supplier endpoint (DELETE /suppliers/v1/suppliers/{id}): deletes an existing company supplier by numeric ID. Returns 204 on success. See reference.

[2026-06-11]

Added

  • Update category name endpoint (PATCH /categories/v1/categories/{id}): renames an existing custom category; only the name field is updated — linked establishments and category type remain unchanged. The new name must be unique within the company. See reference.
  • Delete categories endpoint (DELETE /categories/v1/categories): deletes one or more custom categories in a single request. If a category has linked establishments, supply moveTo to reassign them before deletion — omitting it returns 422. See reference.

[2026-06-03]

Added

  • Partial user update endpoint (PATCH /users/v1/users/{userId}): updates name and/or roleId for an active company user; at least one field required per request. See reference.
  • Adds supplier list endpoint (GET /suppliers/v1/suppliers). See reference.
  • Adds get supplier by ID endpoint (GET /suppliers/v1/suppliers/{id}). See reference.
  • Adds create supplier endpoint (POST /suppliers/v1/suppliers). See reference.

[2026-05-28]

Added

  • List cost centers endpoint (GET /cost-centers/v1/cost-centers): returns all cost centers for the authenticated company. The response includes id, name, companyId, and the optional responsible field with the name and ID of the assigned owner. See reference.

Changed

  • Endpoint PATCH /statements/v1/credit-card/{transactionId}: added costCenterId (UUID) field to classify the transaction by cost center. See reference.

[2026-05-27]

Added

  • Get user by ID endpoint (GET /users/v1/users/{userId}): returns details of a specific company user by UUID v4 identifier; response matches the list item structure (UserDto), with 404 when the user does not belong to the authenticated company.

[2026-05-26]

Added

  • Update card transaction endpoint (PATCH /statements/v1/credit-card/{transactionId}): updates notes, isConciled, and categoryId on a credit card transaction; at least one field required per request.

[2026-05-14]

Changed

  • Card statement endpoint (GET /statements/v1/credit-card): added optional cardIds query parameter (comma-separated string) to filter transactions by one or more cards at once.

[2026-04-28]

Added

  • Create category endpoint (POST /categories/v1/categories): creates a custom category for the company; the name must be unique among the company’s categories.
  • Get category by ID endpoint (GET /categories/v1/categories/{id}): returns a company category by numeric ID; response matches list items (establishments and type).

[2026-04-17]

Added

  • List categories endpoint (GET /categories/v1/categories): returns categories available to the company.

[2026-04-10]

Added

  • Banking statement endpoint (GET /statements/v1/banking): paginated company bank transactions with filters by period, account, category, cost center, status, amount, and responsible user.

[2026-04-02]

Changed

  • Card statement response (GET /statements/v1/credit-card): each item in attachments may include an optional type field with the MIME type (image/jpeg, image/png, or application/pdf) when the file name extension is recognized.

[2026-03-27]

Added

  • Delete user endpoint (DELETE /users/v1/users/{userId}): removes a user from the company by ID.

[2026-03-25]

Added

  • Create user invites endpoint (POST /users/v1/invites): send invites for new users to join the company with email and role.

[2026-03-24]

Added

  • List roles endpoint (/users/v1/roles): returns company roles with profile, permissions (claims), and linked user counts.

[2026-03-23]

Added

  • List user invites endpoint (/users/v1/invites): paginated invites with filters by status and role.

[2026-03-17]

Changed

  • Card statement (/statements/v1/credit-card): documentation updated from POST to GET, with filter parameters (limit, startDate, endDate, types, nextPageStartKey) sent in the query string.

[2026-03-16]

Added

  • Corporate card management endpoints: list with filters, block, and unblock cards.
  • List company users endpoint, with email filter and cursor-based pagination.

[2026-02-25]

Added

  • List credit cards endpoint.

[2026-02-09]

Added

  • Login endpoint for Conta Simples API authentication.

[2026-02-03]

Added

  • Endpoint to download transaction attachments.

[2026-01-19]

Added

  • Card statement endpoint extended with new fields related to attachments.

[2025-10-15]

Added

  • Card statement endpoint.
  • Initial API schema definition for transactions and cards.
Was this page helpful?