# Envestnet Yodlee API: access, auth, sandbox and MCP (checked Oct 2026)

> Envestnet Yodlee publishes a public REST API reference and an OpenAPI 2.0 spec on GitHub, with endpoints for accounts, transactions and holdings. Some services are testable only in a dedicated environment after a contract is signed, and no rate limits are published on the pages read.

- Vendor: Envestnet | Yodlee (Envestnet)
- Website: https://www.yodlee.com/
- Category: Account aggregation (adjacent)
- API access: Not found
- Last checked: 2026-10-17
- Id: `yodlee` · JSON: https://wealthtech.dev/products/yodlee.json

## Developer surface

| Field | Value | Source and quote | Checked |
|---|---|---|---|
| API access | Not found | Not found. Not established. The API reference is public and developer.yodlee.com has a public 'Create Your Account' form (not submitted), but no page read says what an account grants or how production keys are issued. The only quotes about access say some services are not available in the developer sandbox and are testable in a dedicated environment 'once the contract is signed'. They do not show that keys need approval. The access value here only follows the site's convention for a fact that was not found; it is not a finding that no API exists. Not established. The API reference is public and developer.yodlee.com has a public 'Create Your Account' form (not submitted), but no page read says what an account grants or how production keys are issued. The only quotes about access say some services are not available in the developer sandbox and are testable in a dedicated environment 'once the contract is signed'. They do not show that keys need approval. The access value here only follows the site's convention for a fact that was not found; it is not a finding that no API exists. | 2026-10-17 |
| Developer docs | https://developer.yodlee.com/products/yodlee-core-apis-docs-api-reference | Checked on the source's own page. [developer.yodlee.com](https://developer.yodlee.com/products/yodlee/core-apis/docs/api-reference#yodlee-coreapis-verification-post) "This file describes the Yodlee Platform APIs using the swagger notation." | 2026-10-17 |
| API style | REST | Checked on the source's own page. [github.com](https://github.com/Yodlee/OpenAPI) "The master branch contains the latest release of the OpenAPI specification for the Envestnet \| Yodlee V1.1 APIs." | 2026-10-17 |
| Authentication | API key | Checked on the source's own page. [developer.yodlee.com](https://developer.yodlee.com/products/yodlee/core-apis/docs/api-reference#yodlee-coreapis-verification-post) "This endpoint is used to generate an API key." | 2026-10-17 |
| How to get access | Create a developer account on developer.yodlee.com; some services are testable only in a dedicated environment once a contract is signed. | Checked on the source's own page. [developer.yodlee.com](https://developer.yodlee.com/user/register) "Create Your Account" | 2026-10-17 |
| Sandbox | Not found | Not found. The API reference mentions a 'developer sandbox environment' (for example: 'This service is not available in developer sandbox environment') but no page read says how to get sandbox access or for how long. The API reference mentions a 'developer sandbox environment' (for example: 'This service is not available in developer sandbox environment') but no page read says how to get sandbox access or for how long. | 2026-10-17 |
| Rate limits | Not found | Not found. No rate limits found in the API reference, the product pages or the OpenAPI GitHub README. No rate limits found in the API reference, the product pages or the OpenAPI GitHub README. | 2026-10-17 |
| Webhooks | Yes | Checked on the source's own page. [developer.yodlee.com](https://developer.yodlee.com/products/yodlee/core-apis/docs/api-reference#yodlee-coreapis-verification-post) "Customers can subscribe to REFRESH,DATA_UPDATES and AUTO_REFRESH_UPDATES event." | 2026-10-17 |
| SDKs | generated from OpenAPI spec (Python, Java, JavaScript, PHP and others) | Checked on the source's own page. [developer.yodlee.com](https://developer.yodlee.com/products/yodlee/core-apis/docs/api-reference#yodlee-coreapis-verification-post) "You can generate a client SDK for Python, Java, JavaScript, PHP, or other languages" | 2026-10-17 |
| OpenAPI spec | Published | Checked on the source's own page. [github.com](https://github.com/Yodlee/OpenAPI) "We distribute the spec in YAML format. The information conforms to OpenAPI Specification version 2.0 for Yodlee V1.1 APIs." | 2026-10-17 |
| Partner program | Not found | Not found. No partner program page found on developer.yodlee.com pages read. The Account Aggregation page cites '1400+ PARTNERS' without a program page. No partner program page found on developer.yodlee.com pages read. The Account Aggregation page cites '1400+ PARTNERS' without a program page. | 2026-10-17 |
| Public integration list | Not found | Not found. No public list of integrations or connected institutions found on the pages read. No public list of integrations or connected institutions found on the pages read. | 2026-10-17 |
| Ways to connect | Native API | Checked on the source's own page. [developer.yodlee.com](https://developer.yodlee.com/products/yodlee/core-apis/docs/api-reference#yodlee-coreapis-verification-post) "The get user data service is used to get a user's modified data for a particular period of time for accounts, transactions, holdings, and provider account information." | 2026-10-17 |

## MCP servers and AI connectors

None recorded on public pages we checked.

## What the docs don't say

- No rate limits are stated on the API reference or product pages read.
- The reference does not say how long developer sandbox access lasts or what the sign-up form grants.
- Key management and event-subscription endpoints are noted as unavailable in the developer sandbox until a contract is signed.

## Changes

No changes recorded since this record was first published.
---
Source: https://wealthtech.dev/products/yodlee · Facts licensed CC BY 4.0 (attribution "wealthtech.dev"). Every fact states where it was checked and when; check the source before relying on it.