Chaser
BUSINESS · COMMERCE & FINANCE
Customers, invoices, payment history, and chasing schedules in that organisation.
Connecting Chaser in practice
Chaser allows 200 requests per minute and waives the limit entirely for the first 24 hours after an organisation is created, so the initial sync gets a free pass the ongoing integration does not. Bad credentials come back as 403 forbidden_error rather than 401, and bulk upserts are capped at 100 entries per request.
Rate limits
- 200 requests per minute. Exceeding it returns 429 with {"type":"rate_limit_error","message":"Rate limit exceeded, retry in 1 minute"}.
- Rate limiting is waived for the first 24 hours after the organisation is created, to simplify the initial sync.
- List endpoints: limit 1–100 with a default of 100, and page numbering starts from 0.
- Bulk upsert endpoints accept up to 100 items per request.
Who has to approve
There is no per-user OAuth flow. Someone with access to the Chaser organisation has to create the organisation, choose API from the list of accounting systems, click Connect with API, and then issue a key and secret under Organisation Settings → Integrations — so access is granted and revoked in the tenant’s own settings rather than by the connecting user.
Worth knowing
- An invalid API key or secret returns 403 forbidden_error, not 401, so code that treats 403 as "wrong permissions" will misread a rotated credential.
- Resources can be addressed by internal id or by the source system’s identifier with an ext_ prefix (/v1/customers/ext_1234), which removes the need to store Chaser’s own IDs — but the two forms live in the same path slot.
- Invoice status drives visibility, not a separate flag: PAID invoices stay visible for six months after the fully paid date and are then archived out of the database, while DRAFT, SUBMITTED, VOIDED and DELETED are invisible, send no reminders and are excluded from every report.
- Filtering uses bracketed operators — status[ne]=AUTHORISED, amount_due[gte]=1000, invoice_id[in]=1,2,3 — combined only as logical AND, and the supported operators differ per field.
Checked against Chaser API OpenAPI specification (2026-09-29), Connect to Chaser using Chaser API (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Chaser behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.