Plaid Sandbox connector for AI agents

Tools your QA agent reaches for on Plaid Sandbox, scoped per user.

CALL ANY TOOL

32 tools for fintech testing in Plaid Sandbox: create test Items, add custom transactions, fire webhooks, set login and verification states, and read accounts, balances, transactions, identity, and investments.

plaidsandbox_accounts_balance_get

Get accounts balance

Get real-time balances for an Item's accounts by fetching fresh data from the institution. Returns accounts with balances (available, current, limit, iso_currency_code, last_updated_datetime) and item. Use plaidsandbox_accounts_balance_get before moving money or whenever balances must be current. Each call is billed and usually takes under 10 seconds, sometimes 30 or more. Use plaidsandbox_accounts_get for free cached balances.

Parameters

Name

Type

Required

Description

access_token

string

Required

The Item's access_token, returned by plaidsandbox_item_public_token_exchange after the end user links an account with Plaid Link. It starts with access-sandbox-. Example: access-sandbox-de3ce8ef-33f8-452c-a685-8671031fc0f6.

account_ids

array

Optional

Limit the accounts returned to these account_ids, from plaidsandbox_accounts_get. Leave empty for all of the Item's accounts. Plaid returns an error if an id does not belong to the Item. Example: ["BxBXxLj1m4HMXBm9WZZmCWVbPjX16EHwv99vp"].

min_last_updated_datetime

string

Optional

Oldest acceptable balance time, ISO 8601 (YYYY-MM-DDTHH:mm:ssZ). Only needed for institutions that do not return real-time balances (for example Capital One); Plaid returns an error if its balance is older. Example: 2026-10-20T00:00:00Z.

plaidsandbox_accounts_get

Get accounts

plaidsandbox_auth_get

Get auth

plaidsandbox_identity_get

Get identity

plaidsandbox_identity_match

Identity match

plaidsandbox_institutions_get

Get institutions

plaidsandbox_institutions_get_by_id

Institutions get by id

plaidsandbox_institutions_search

Search institutions

plaidsandbox_investments_refresh

Refresh investments

plaidsandbox_investments_transactions_get

Get investments transactions

plaidsandbox_item_access_token_invalidate

Item access token invalidate

plaidsandbox_item_get

Get item

plaidsandbox_item_public_token_exchange

Item public token exchange

plaidsandbox_item_remove

Remove item

plaidsandbox_item_webhook_update

Update item webhook

plaidsandbox_liabilities_get

Get liabilities

plaidsandbox_link_token_create

Create link token

Create a link_token that your app uses to open Plaid Link, either to connect a new Item or to open update mode for an existing one. Returns link_token and its expiration (4 hours for a new Item, 30 minutes for update mode), plus hosted_link_url when hosted_link is set. Use plaidsandbox_link_token_create before each Link session. Pass access_token, and no products, to open update mode, which repairs an Item in ITEM_LOGIN_REQUIRED or adds accounts. Use plaidsandbox_link_token_get to read the session's results afterwards.

Parameters

Name

Type

Required

Description

client_name

string

Required

Your application's name as Link should show it, up to 30 characters. Longer names show as "This Application". Example: Acme Budget.

client_user_id

string

Required

Your own stable, unique id for the end user, up to 128 characters. Do not use personal data such as an email address or phone number. Sent as user.client_user_id. Example: user-8231.

country_codes

array

Required

Countries to include institutions shown in Link from, as ISO-3166-1 alpha-2 codes. Plaid supports US, CA, GB and several EU countries. Example: ["US"].

access_token

string

Optional

An existing Item's access_token, to open Link in update mode for that Item, for example to fix ITEM_LOGIN_REQUIRED or add accounts. Leave products empty when you set this. Example: access-sandbox-de3ce8ef-33f8-452c-a685-8671031fc0f6.

account_filters

object

Optional

Limit which account types and subtypes the user can pick in Link. Keys are account types (depository, credit, loan, investment, other), each with an account_subtypes list. Example: {"depository": {"account_subtypes": ["checking", "savings"]}}.

additional_consented_products

array

Optional

Products the user consents to now so you can add them later without sending the user through Link again. They are not billed until you use them. Example: ["liabilities"].

android_package_name

string

Optional

Your Android app's package name, required when Link runs on Android. Must be registered in the Plaid Dashboard. Example: com.example.budget.

hosted_link

object

Optional

Set this to use Hosted Link, where Plaid hosts the Link page and returns hosted_link_url; an empty object {} is enough. Optional keys: completion_redirect_uri (where to send the user afterwards), url_lifetime_seconds (how long the URL stays valid) and is_mobile_app. Example: {"completion_redirect_uri": "https://example.com/plaid/done", "url_lifetime_seconds": 3600}.

language

string

Optional

Language Link is shown in, as a two-letter code such as en, fr, es or de. Defaults to en. Example: en. One of: `da`, `nl`, `en`, `et`, `fr`, `de`, `ht`, `hi`, `it`, `lv`, `lt`, `nb`, `pl`, `pt`, `ro`, `es`, `sv`, `vi`. Default: `en`.

link_customization_name

string

Optional

Name of a Link customization from the Plaid Dashboard to apply. Defaults to the default customization. Example: default.

optional_products

array

Optional

Products to add if supported, billed only when you first call them. Example: ["auth"].

products

array

Optional

Products the new Item must support; Link only shows institutions that support all of them, and they are billed once the Item is created. Common values: transactions, auth, identity, investments, liabilities, statements. Leave empty in update mode (when access_token is set). Example: ["transactions"].

redirect_uri

string

Optional

Where Link sends the user back after an OAuth bank login. Must be registered in the Plaid Dashboard under Allowed redirect URIs. Required for OAuth institutions when Link runs in a browser or iOS app. Example: https://example.com/plaid/oauth-return.

required_if_supported_products

array

Optional

Products to add when the institution supports them; Link still shows institutions that do not. Example: ["identity"].

statements

object

Optional

Required when statements is one of the products: the date range of statements to fetch, as start_date and end_date (YYYY-MM-DD, up to two years). Example: {"start_date": "2025-01-01", "end_date": "2025-12-31"}.

transactions_days_requested

integer

Optional

Days of transaction history (1 to 730) to request when transactions is one of the products. Plaid defaults to 90. Request at least 180 for recurring transactions. Sent as transactions.days_requested. Example: 365.

update

object

Optional

Update mode options. Set account_selection_enabled to true to let the user add or remove accounts on the Item. Example: {"account_selection_enabled": true}.

user_id

string

Optional

A user_id from plaidsandbox_user_create. Required for Plaid Check, Income, Multi-Item Link and Plaid Protect; leave empty for other products. Example: usr_8c3ZbDBYjaqUXZ.

webhook

string

Optional

HTTPS URL that Plaid sends this Item's webhooks to. Example: https://example.com/plaid/webhook.

plaidsandbox_link_token_get

Get link token

plaidsandbox_sandbox_item_fire_webhook

Sandbox item fire webhook

plaidsandbox_sandbox_item_reset_login

Sandbox item reset login

plaidsandbox_sandbox_item_set_verification_status

Sandbox item set verification status

plaidsandbox_sandbox_public_token_create

Create sandbox public token

Create a test Item in Sandbox without running Plaid Link, and get its public_token. Returns public_token, which plaidsandbox_item_public_token_exchange turns into an access_token. Use plaidsandbox_sandbox_public_token_create to set up test data: pick an institution such as ins_109508 (First Platypus Bank) and the products to start with. The default test login is user_good / pass_good; use user_custom with a JSON configuration as the password for custom accounts and transactions.

Parameters

Name

Type

Required

Description

initial_products

array

Required

Products to initialize the Item with. Example: ["transactions", "auth", "identity"].

institution_id

string

Required

Sandbox institution to create the Item at. Example: ins_109508 (First Platypus Bank, a non-OAuth test bank that supports most products).

override_password

string

Optional

Sandbox test password. Defaults to pass_good. With override_username user_custom, pass the custom user's JSON configuration as a string here. Example: pass_good.

override_username

string

Optional

Sandbox test username. Defaults to user_good. Use user_transactions_dynamic for transactions that change over time, user_custom to define accounts and data in override_password, or the name of a custom user from the Plaid Dashboard. Example: user_good.

statements_end_date

string

Optional

Latest statement date to load, YYYY-MM-DD, when statements is an initial product. Set together with statements_start_date. Sent as options.statements.end_date. Example: 2026-09-30.

statements_start_date

string

Optional

Earliest statement date to load, YYYY-MM-DD, when statements is an initial product. Set together with statements_end_date. Sent as options.statements.start_date. Example: 2025-10-01.

transactions_days_requested

integer

Optional

Days of transaction history (1 to 730) to create when transactions is an initial product. Plaid defaults to 90. Sent as options.transactions.days_requested. Example: 365.

user_id

string

Optional

A user_id from plaidsandbox_user_create, for products that need a Plaid user (such as Plaid Check). Leave empty otherwise. Example: usr_8c3ZbDBYjaqUXZ.

webhook

string

Optional

Webhook URL to set on the new Item. Example: https://example.com/plaid/webhook.

plaidsandbox_sandbox_transactions_create

Create sandbox transactions

plaidsandbox_statements_list

List statements

plaidsandbox_statements_refresh

Refresh statements

plaidsandbox_transactions_get

Get transactions

plaidsandbox_transactions_refresh

Refresh transactions

plaidsandbox_transactions_sync

Sync transactions

Get an Item's transaction changes since a cursor: transactions added, modified and removed. Returns added and modified transactions (transaction_id, account_id, amount, iso_currency_code, date, name, merchant_name, pending, personal_finance_category), removed transaction ids, next_cursor, has_more and transactions_update_status. Use plaidsandbox_transactions_sync to load history and then stay up to date: leave cursor empty on the first call, pass next_cursor each time, and repeat while has_more is true. Use plaidsandbox_transactions_get for a fixed date range. Right after linking, results can be empty until transactions_update_status reaches INITIAL_UPDATE_COMPLETE or HISTORICAL_UPDATE_COMPLETE; call again later.

Parameters

Name

Type

Required

Description

access_token

string

Required

account_id

string

Optional

Only return changes for this one account_id, from plaidsandbox_accounts_get. The cursor then tracks only that account. Example: BxBXxLj1m4HMXBm9WZZmCWVbPjX16EHwv99vp.

count

integer

Optional

Maximum transaction updates to return per call, 1 to 500. Defaults to 100. Default: `100`.

cursor

string

Optional

next_cursor from the previous call. Leave empty on the first call to get the full history. Store the latest cursor to fetch only new changes next time. Example: eyJsYXN0X2FjY291bnRfdXBkYXRlIjoiMjAyNi0xMC0yMFQwMDowMDowMFoifQ.

days_requested

integer

Optional

Days of transaction history (1 to 730) to request when this call is what adds Transactions to the Item. Ignored if the Item already has Transactions. Plaid defaults to 90.

include_original_description

boolean

Optional

Set to true to also return each transaction's raw, unparsed description from the institution (original_description). Defaults to false.

personal_finance_category_version

string

Optional

Version of Plaid's personal finance category taxonomy to return: v1 or v2. Leave empty for the version your Plaid account is set to. Example: v2. One of: `v1`, `v2`.

plaidsandbox_user_create

Create user

plaidsandbox_user_remove

Remove user

For more tools, view docs.

Build your Agent

Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.

import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// Plaid Sandbox tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["plaidsandbox"], toolNames: [
    "plaidsandbox_sandbox_public_token_create",
    "plaidsandbox_item_public_token_exchange",
    "plaidsandbox_transactions_sync"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Create a test Item at First Platypus Bank and sync its transactions" }] });

import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["plaidsandbox"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Create a test Item at First Platypus Bank and sync its transactions" }],
  tools,
});

// Execute the tool call with the user's vaulted Plaid Sandbox API key
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");

import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["plaidsandbox"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Create a test Item at First Platypus Bank and sync its transactions" }],
  tools,
});

// Tool call runs with the user's vaulted Plaid Sandbox API key
await sk.tools.executeTool(msg.content, "user_123");

import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["plaidsandbox"] }, pageSize: 100,
});

const agent = new Agent({
  name: "sandbox_test_agent",
  model: "gemini-2.5-pro",
  instruction: "Plaid Sandbox tools scoped to this user",
  tools,
});

await agent.run("Create a test Item at First Platypus Bank and sync its transactions");

Try these prompts

Copy any prompt into your agent. Each maps directly to a Plaid Sandbox tool. Click to copy, paste into your agent, done.

Test setup

Copy the prompt

Copied

Create a test Item at First Platypus Bank with the transactions product.

Copy the prompt

Copied

Add 5 custom transactions to this test Item, including a $1,200 rent payment.

Copy the prompt

Copied

Fire a SYNC_UPDATES_AVAILABLE webhook for this test Item.

Error states

Copy the prompt

Copied

Force this test Item into the ITEM_LOGIN_REQUIRED state.

Copy the prompt

Copied

Mark the micro-deposits on this test account as verified.

Copy the prompt

Copied

Check this test Item's status after the reset.

Reading data

Copy the prompt

Copied

Sync transactions for this test Item.

Copy the prompt

Copied

Get balances for every account on this test Item.

Copy the prompt

Copied

Show the identity data on file for this test Item.

SEE HOW AUTH WORKS

Each user connects their own Plaid Sandbox API key once, and Scalekit sends it with every call. Keys stay vaulted, every call is scope checked, and every action is logged.

Authorize

Your user connects

Plaid Sandbox

once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access

Who:

user ‘A’

when:

Once per user

access:

Limited to user

Store

Their

Plaid Sandbox

token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection

vault:

encrypted

scope:

per-user

tokens:

auto-refreshed

Resolve

When your agent calls a

Plaid Sandbox

tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs

speed:

~40ms

check:

before every call

seen by:

nobody

Audit

Every

Plaid Sandbox

tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it

history:

90 days

export:

SIEM-ready

logged:

every call

Test other agents

See the same per-user auth pattern across other accounting and finance connectors.

GTM and RevOps Teams

Revenue forecast commentary

Pulls open pipeline from Salesforce and HubSpot, calculates coverage against quota, flags at-risk stages, posts commentary to Slack, and logs every snapshot to Google Sheets.

Why Scalekit

Secure your agent's access. Connectors ship in minutes

01.

Shared tokens break per-user analytics

A shared Plaid Sandbox API key looks fine in a demo. In production every test Item and webhook looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.

// shared key
audit → bot_service_account

// scalekit
audit → user_abc ✓

02.

Authentication is not authorization

03.

Multi-tenancy is architectural

04.

Plaid Sandbox today. Ten connectors tomorrow.

“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”

Venu Madhav Kattagoni

Head of Engineering / Von

FAQs

Frequently Asked Questions

Does the agent access Plaid Sandbox as the user or through a shared API key?

As the user. Each user connects their own Plaid Sandbox API key once, and Scalekit sends it with every call. Audit logs attribute every test Item, webhook, and data read to that user, not a shared service account.

Where is the Plaid Sandbox API key stored?

In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new API key. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.

Can I limit what the agent does in Plaid Sandbox?

Yes. Filter by tool name in listScopedTools to expose only what you want, for example the sandbox setup and read tools without plaidsandbox_user_remove, which deletes a Plaid user and every Item linked to it. Scalekit also enforces scope checks before every API call.

What happens when a user revokes Plaid Sandbox access?

The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.

What is Plaid Sandbox for?

Building and testing with test banks and test data. Plaid Sandbox uses your Plaid client ID and Sandbox secret and calls Plaid's Sandbox environment. Tools such as plaidsandbox_sandbox_public_token_create and plaidsandbox_sandbox_item_fire_webhook create test Items and trigger test events without Plaid Link.