PDFMonkey
DOCS & KNOWLEDGE · FILES & DOCS
PDFs generated from their own templates, the templates themselves, and the account behind them.
Connecting PDFMonkey in practice
A PDFMonkey secret key "carries the same privileges as your account" and there are no scopes to narrow it, so the credential that renders an invoice can also delete templates. Every download URL is a signed S3 link valid for 1 hour, so an agent that stores the URL instead of the file loses the PDF.
Scopes that draw scrutiny
Authorization: Bearer YOUR_SECRET_KEYThe only credential PDFMonkey documents. It "carries the same privileges as your account", so read-only access is not expressible.
Rate limits
- List endpoints return at most 24 items per page.
- The synchronous generation endpoint waits up to 6 minutes for generation to complete.
- The meta field accepts up to 200 KB of metadata per document.
Worth knowing
- Documents default to status "draft" and do nothing until you set status to "pending", so a creation call that looks successful may never produce a file.
- Download URLs expire after an hour; fetching the document again returns a fresh URL without regenerating the PDF, which is the cheap fix people miss.
- The status machine is draft, pending, generating, success, failure — three of the five are non-terminal, so polling has to distinguish "not yet" from "never".
- For volume the documentation steers you to async generation plus webhooks rather than the 6-minute synchronous endpoint.
Checked against API authentication (2026-09-29), API documents (2026-09-29), PDFMonkey documentation (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put PDFMonkey behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.