Developers

The Ledger Is an API. The Audit Trail Is a Query.

Everything the app can show you, your systems — or your auditor's — can query directly.

  • Event-sourced core — every posted entry is an immutable event; nothing is edited in place
  • RBAC enforced server-side — permission checks happen at the command layer, not just the UI
  • Documented, not black-boxed — every architectural decision has a public ADR

Quick Start

Authenticate and Query

Every service token is issued from a user's own settings page and binds to api.ledgerwriter.com.

curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://api.ledgerwriter.com/v1/companies

Read This First

Architecture, Not Just Endpoints

This reader's first question is usually "how is this built," not "what's the endpoint for X" — so the docs lead with the architecture decisions themselves.

Event Sourcing

The core ledger domain: aggregates, commands, events, projections. Every posted entry is an immutable event.

Auth & Identity (CRUD)

The concrete customer-auth mechanism and RBAC role matrix — enforced at the command layer, not just the UI.

Tenant Data Partitioning

How pricing tiers map to physical isolation — shared D1 vs. dedicated database via Workers for Platforms.

SOX/GAAP Mapping

The full requirement-by-requirement mapping this site's compliance positioning is built on.

Multi-Company Access

How one person can hold access to several tenants without weakening per-tenant isolation.

Consolidated Statements

GAAP-correct consolidation across corporate ownership — investment elimination and non-controlling interest.

Resource Reference

Conventional API Docs

Same endpoint shape as any REST API, once the architecture questions are answered:

  • Authentication
  • Companies
  • Chart of Accounts
  • Journal Entries
  • Financial Reports
  • Consolidation
  • Webhooks
  • Rate Limits
  • Errors

Who Builds on This

Audit / CPA Firms

Pull client audit trails and trial balances directly instead of requesting exports.

Finops / Controller Teams

Wire the ledger's events into internal reporting or alerting instead of polling the UI.

Compliance Tooling Vendors

Build on top of an event stream that is already audit-shaped, instead of reconstructing one from a CRUD API.

Get an API Key

Sign up for Free/Dev and generate a service token from your settings page.