# Holistiplan API: access, auth, sandbox and MCP (checked Oct 2026)

> Holistiplan's Public API uses OAuth 2.0 client credentials against api.holistiplan.com/v2, and access is evaluated case by case. The published limit is 1,000 requests per hour per client in production, and tokens expire after 10 hours.

- Vendor: Holistiplan LLC (Holistiplan LLC)
- Website: https://www.holistiplan.com/
- Category: Financial planning (core)
- API access: Open docs, keys by approval
- Last checked: 2026-10-17
- Id: `holistiplan` · JSON: https://wealthtech.dev/products/holistiplan.json

## Developer surface

| Field | Value | Source and quote | Checked |
|---|---|---|---|
| API access | Open docs, keys by approval | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "Access to the Public API is evaluated on a case-by-case basis." | 2026-10-17 |
| Developer docs | https://help.holistiplan.com/getting-started-with-the-holistiplan-api | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "Getting Started with the Holistiplan API" | 2026-10-17 |
| API style | REST | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "GET https://api.holistiplan.com/v2/households/" | 2026-10-17 |
| Authentication | OAuth 2.0 (client credentials) | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "Holistiplan's API uses OAuth 2.0 Client Credentials authentication." | 2026-10-17 |
| How to get access | Request access via the link on the Getting Started page; once approved, create a Client ID and Secret under Settings > Security Settings > API Keys. | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "Click here to request access" | 2026-10-17 |
| Sandbox | Not found | Not found. The Getting Started page describes only production use; no test environment is mentioned. The Getting Started page describes only production use; no test environment is mentioned. | 2026-10-17 |
| Rate limits | 1,000 requests per hour per client in production | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "The Public API is limited to 1,000 requests per hour per client in production." | 2026-10-17 |
| Webhooks | Not found | Not found. No webhooks mentioned on the Getting Started or incremental-sync pages; the sync guide describes polling with __gte timestamp filters. No webhooks mentioned on the Getting Started or incremental-sync pages; the sync guide describes polling with __gte timestamp filters. | 2026-10-17 |
| SDKs | Not found | Not found. No SDKs named on the Getting Started page. No SDKs named on the Getting Started page. | 2026-10-17 |
| OpenAPI spec | Not found | Not found. Interactive API documentation is at app.holistiplan.com/api/public/docs/ but that URL redirected to a sign-in page; no downloadable spec seen. Interactive API documentation is at app.holistiplan.com/api/public/docs/ but that URL redirected to a sign-in page; no downloadable spec seen. | 2026-10-17 |
| Partner program | Public API for firms and integration partners, access evaluated case by case | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "allows firms and integration partners to programmatically access and interact with Holistiplan data" | 2026-10-17 |
| Public integration list | https://help.holistiplan.com/integrations | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/integrations) "Wealthbox Integration Guide" | 2026-10-17 |
| Ways to connect | Native API, Single sign-on | Checked on the source's own page. [help.holistiplan.com](https://help.holistiplan.com/getting-started-with-the-holistiplan-api) "Holistiplan's Public API uses API v2." | 2026-10-17 |

## MCP servers and AI connectors

None recorded on public pages we checked.

## What the docs don't say

- The interactive API reference needs a sign-in; the endpoint-reference article was not readable at help.holistiplan.com/holistiplan-api-endpoint-reference (404), so endpoints are not listed publicly in what was read.
- No sandbox or webhooks are described; the incremental-sync guide describes polling with timestamp filters.

## Changes

No changes recorded since this record was first published.
---
Source: https://wealthtech.dev/products/holistiplan · Facts licensed CC BY 4.0 (attribution "wealthtech.dev"). Every fact states where it was checked and when; check the source before relying on it.