# Wealthbox API access tokens (/integrations/wealthbox-service-account)

Connect Wealthbox with an API access token from the user whose records your workflows should access. The token uses that user's permissions.

## Prerequisites \[#prerequisites]

An expired Wealthbox trial returns `402 Trial expired`; confirm the account has current API access. If you don't see an **API Access** section in your Wealthbox settings, contact Wealthbox support before continuing.

Wealthbox tokens are tied to the user who creates them and carry that user's permissions. For production workflows, create the token from a dedicated service login with adequate record visibility rather than a personal account — the workflow identity is separate from an individual employee. The service login must remain active.

## Create the API access token \[#creating-the-api-access-token]

Log in to Wealthbox, open **Settings** (the three-dot menu), and go to **API Access** (direct link: [app.crmworkspace.com/settings/access\_tokens](https://app.crmworkspace.com/settings/access_tokens))

Click **Create Access Token**, give it a label (e.g. `sim-workflows`), and save

Copy the token. Wealthbox doesn't document an expiry for API access tokens; you can revoke it from this same page at any time.

Warning:

The token carries the full permissions of the user who created it — there is no scope selection. Treat it like a password: do not commit it to source control or share it publicly. Sim encrypts the token at rest.

## Add the API access token to Sim \[#adding-the-api-access-token-to-sim]

Open **Integrations** from your workspace sidebar

Search for "Wealthbox" and open it, then click **Add to Sim** and choose **Add access token**

Paste the API access token, and optionally set a display name and description

Click **Add access token**. Sim verifies the token by calling Wealthbox's `/v1/me` endpoint — if it fails, you'll see a specific error explaining what went wrong.

## Use the credential in workflows \[#using-the-credential-in-workflows]

Add a Wealthbox block to your workflow. In the credential dropdown, select the saved Wealthbox API access token. Configure the selected operation.

The block calls Wealthbox's API (`api.crmworkspace.com`) with the token. The credential acts as the Wealthbox user who created the token — contacts, tasks, and notes the workflows touch are the ones that user can see under Wealthbox's permission settings.

## Troubleshooting and rotation \[#troubleshooting-and-rotation]

| Problem | What to check |
| - | - |
| **API Access** is missing | Ask Wealthbox support whether API access is enabled for the account. An expired trial returns `402 Trial expired`. |
| A valid token is rejected by Sim | Wealthbox documents the `ACCESS_TOKEN` header for personal tokens. Sim's existing tools use `Authorization: Bearer` and reject a token that works only with `ACCESS_TOKEN`; use OAuth if the token cannot pass Sim's check. |
| A record returns `403` | The token's user does not have permission to view or change that record. Adjust access in Wealthbox. |
| Authentication starts failing | Check whether the token was revoked and whether the account remains eligible for API access. Wealthbox does not document a fixed expiry for personal API tokens; indefinite validity is unverified. |

For a user with multiple workspaces, `/v1/me` reports the token's workspace in `current_user.account`. Verify that workspace before relying on its data; the credential has no workspace picker.

To rotate, create a new token in Wealthbox's **API Access** settings, select **Reconnect** on the saved credential in Sim, and paste it. Verify a read before revoking the old token. See the [Wealthbox authentication reference](https://dev.wealthbox.com/#authentication).