Settings
Integrations, people and the numbers the rules run on.
JWT Grant
JWT Grant has no refresh token. The access token lives one hour and is re-minted from a
freshly signed assertion, so what matters here is consent and the key, not an expiry date.
Account ID and base URI are discovered from
/oauth/userinfo and cached — that
endpoint is itself rate limited.Status
ConsentGranted
Access token38:04
Calls this hour412 / 3,000
HMAC failures0
Connect webhook
Signature arrives as
X-DocuSign-Signature-1, and up to -100 during key
rotation — we accept if any of them verifies. The digest is computed over the
raw request bytes before parsing; re-serialising the JSON first breaks it.
Per-entity connections live on the QuickBooks screen, because
each LLC is its own realm with its own token lifecycle.
Airtable
Webhooks expire after seven days
Airtable webhooks die silently unless refreshed. This one has five days left, and the refresh
job runs daily — but it earns a tile on the health screen because it is the kind of thing that
fails quietly at 2am on a Sunday.
Five requests per second per base, ten records per write, and a 429 forces a thirty-second
cooldown — so a two-hundred-line invoice writes as twenty batched calls over about four seconds.
That is why long writes show progress rather than a spinner.
Intake addresses
| Entity | Address | Today |
|---|---|---|
| Raritan Holdings LLC | ap@raritanholdings.com | 4 |
| Bergen Build Co LLC | ap@bergenbuild.com | 19 |
| Grove Street Development LLC | ap@grovestdev.com | 7 |
| Hudson Materials Import LLC | ap@hudsonmaterials.com | 2 |
| Meadowlands Freight LLC | ap@meadowlandsfreight.com | 2 |
| Passaic Capital Partners LLC | ap@passaiccapital.com | 0 |
Senders resolve in order: a known address on the vendor record, then the remit-to domain (never a
free domain like gmail.com), then a fuzzy match on the OCR'd name, then the EIN. Anything left
lands in an unmatched queue, and once a person maps it the address is written back so it never asks again.
People & approval authority
| Person | Role | Tier | Ceiling | Pending | Median turnaround |
|---|
Segregation of duties is enforced across five functions: vendor master maintenance, invoice entry,
approval, payment release, and reconciliation. The combinations that get blocked outright are
vendor-creation plus approval, and invoice-entry plus payment release.