Deel API Authentication

Toku connects to Deel as an authorized Deel App Store application using Deel’s OAuth 2.0 flow. Your Deel admin authorizes the connection once — no API keys are copied or stored by your team.

OAuth 2.0 Flow

Authorize

From the Toku dashboard, your admin is redirected to Deel’s consent screen, which lists every scope Toku requests.

Exchange

Deel redirects back with an authorization code, which Toku’s backend exchanges for an access token and refresh token.

Refresh

Access tokens live for 30 days. Toku rotates them automatically using Deel’s single-use refresh tokens — the connection stays live without re-authorization.

Authenticated requests are sent over HTTPS and carry the token as a bearer header alongside Toku’s client identifier — Deel requires both:

curl "https://api.letsdeel.com/rest/v2/people" \
  -H "Authorization: Bearer <access_token>" \
  -H "x-client-id: <toku_client_id>"

Scopes

Deel enforces granular scopes in the {resource}:read / {resource}:write format. Toku requests the minimum set needed for stablecoin payroll:

Scope	Access	Used for
`people:read`	Read	Worker roster sync and matching
`worker:read`	Read	Worker-level detail for roster sync
`contracts:read`	Read	Mapping each worker’s active contract
`adjustments:read`	Read	Verifying the Toku deduction each cycle
`adjustments:write`	Write	Applying the Toku deduction

Any call outside these scopes is rejected by Deel. You can revoke Toku’s authorization at any time from your Deel account, which immediately invalidates all tokens.

Environments

Environment	Base URL
Production	`https://api.letsdeel.com/rest/v2`
Sandbox (used during implementation testing)	`https://api-sandbox.demo.deel.com`

Toku is integrated through the Deel Developer Platform partner process as a Deel App Store application. See Deel’s authentication docs and OAuth reference to validate any of the calls referenced in this section.

People Sync

How Toku reads your worker roster

Payroll Sync

How Toku tracks payroll cycles and payslips

​OAuth 2.0 Flow

​Scopes

​Environments

​Next

People Sync

Payroll Sync

OAuth 2.0 Flow

Scopes

Environments

Next