`personalTax.grants.prepare`

Prepare a browser review of accountant access for one of your live organization consents. Set accountantAudience company with accountantUserIds [] to allow all current and future company accountants for the consent's existing end date. Use named with individual accountantUserIds to add or renew individual access. Switching from company to named ends whole-team access and allows only the selected people. Include consentId, expiry, expectedRevision and idempotencyKey. Each accountant also needs current company tax_numbers access. Preparing a review grants nothing; the person confirms the exact audience in their signed-in account.

POST/api/v1/accounting/personalTax.grants.prepare

Permissions

accounting:readaccounting:write

Who can call it

admin, finance, contributor, accountant

Retries

Idempotency key required, with expectedRevision

MCP

accounting_personal_tax_grants_prepare

Fields

consentIdstring (ID)Required
The ID of the related record.
accountantAudienceenum
companynamed
accountantUserIdsarray of stringsRequired
A list of record IDs.
at most 20 items · each 1–200 characters
expiresAtstring (date-time) or nullRequired
When this stops working, as an ISO 8601 date and time.
expectedRevisionintegerRequired
The record's current revision, from the last time you read it. If someone changed the record since, the request is refused with a conflict so you can reload and check before trying again.
0 to 9007199254740991
idempotencyKeystringRequired
Any unique text you generate once per intended change, so a retried request only happens once. Send it as the Idempotency-Key header instead if you prefer; if you send both they must match.
8–200 characters

curl https://app.getoatmilk.com/api/v1/accounting/personalTax.grants.prepare \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "consentId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
  "accountantUserIds": [
    "example"
  ],
  "expiresAt": "2026-09-30T14:00:00Z",
  "expectedRevision": 3
}'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/personalTax.grants.prepare", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "consentId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
    "accountantUserIds": [
      "example"
    ],
    "expiresAt": "2026-09-30T14:00:00Z",
    "expectedRevision": 3
  }),
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os
import uuid

import requests

response = requests.post(
    "https://app.getoatmilk.com/api/v1/accounting/personalTax.grants.prepare",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "consentId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
        "accountantUserIds": [
            "example",
        ],
        "expiresAt": "2026-09-30T14:00:00Z",
        "expectedRevision": 3,
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Response

{
  "data": { … }
}

Try it

Checks your input with this action’s real schema and answers like the API, with synthetic data. No key needed, and nothing changes.

Input

POST/api/v1/accounting/personalTax.grants.prepare

curl https://app.getoatmilk.com/api/v1/accounting/personalTax.grants.prepare \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "consentId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
  "accountantUserIds": [
    "example"
  ],
  "expiresAt": "2026-09-30T14:00:00Z",
  "expectedRevision": 3
}'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/personalTax.grants.prepare", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "consentId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
    "accountantUserIds": [
      "example"
    ],
    "expiresAt": "2026-09-30T14:00:00Z",
    "expectedRevision": 3
  }),
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os
import uuid

import requests

response = requests.post(
    "https://app.getoatmilk.com/api/v1/accounting/personalTax.grants.prepare",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
        "Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "consentId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
        "accountantUserIds": [
            "example",
        ],
        "expiresAt": "2026-09-30T14:00:00Z",
        "expectedRevision": 3,
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Fields

Example

Try it