Skip to main content
Brex is a business financial platform offering corporate cards, cash management accounts, and expense tracking. Sure connects to Brex using a read-only API token you generate from the Brex developer settings. See Transaction history and import limits for initial sync defaults, history limits, and options for older transactions.

​
How it works

Sure uses the Brex API to pull account balances and transaction history directly into your family’s accounts. Each Brex company you want to connect requires its own named connection and API token.

​
Setting up Brex

​
Step 1: Generate a Brex API token

  1. Log in to brex.com with the account you want to connect.
  2. Go to the Brex developer or API token settings for the company.
  3. Create a new API token with the following read-only scopes:
    • accounts.cash.readonly
    • accounts.card.readonly
    • transactions.cash.readonly
    • transactions.card.readonly
  4. Copy the generated token.

​
Step 2: Add the connection in Sure

  1. Go to Settings → Providers.
  2. Find the Brex section.
  3. Enter a connection name (for example, “Business checking”) and paste the token.
  4. Leave the Base URL field blank for production. The field is available for Brex-approved staging environments only and does not accept customer tokens.
  5. Click Add Brex connection.
Sure begins syncing your accounts automatically after saving the connection.

​
Step 3: Set up accounts

After the first sync, Brex accounts appear in the setup queue. Go to the connection panel and click Set up accounts to assign each account an account type (checking, savings, credit card, and so on) and a transaction history start date before they appear in your account list. You can sync up to three years of transaction history.

​
Multiple companies

Use a separate named connection for each Brex company or API token you want to sync. Each connection is independent and syncs only the accounts accessible to its token.

​
Encryption

Brex API tokens are stored using ActiveRecord Encryption when encryption keys are configured in your deployment. Without encryption keys, tokens are stored in plaintext. Configure ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY, ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY, and ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT before adding tokens in a production environment.

​
Account types

Brex exposes two kinds of accounts: During account setup you choose the Sure account type (checking, savings, credit card, and so on) that matches each imported account.

​
Transaction classification

Sure automatically classifies certain Brex card transactions when importing:
  • Credit card payments: A card account transaction with type COLLECTION and a negative amount is classified as a credit card payment transfer (cc_payment). This covers the payment from your bank to your Brex card.
  • Refunds and credits: A COLLECTION transaction with a positive amount (money returned to the card) is imported as a regular transaction, not a credit card payment.
This means refunds and statement credits appear in your transaction list rather than being treated as payments, so they show up correctly in budgets and reports.

​
Troubleshooting

​
Invalid API token

Check that you copied the full token and that the token has not been revoked. Generate a new token from the Brex developer settings if needed.

​
Insufficient permissions

The token must include all four required scopes: accounts.cash.readonly, accounts.card.readonly, transactions.cash.readonly, and transactions.card.readonly. Regenerate the token with the correct scopes.

​
Expired credentials

Brex tokens can expire or be revoked. When Brex rejects the token with a 401 or 403, Sure marks the connection as requiring an update and the sync fails — the connection card shows a Reconnect prompt instead of a green “Connected” status. This also applies when the token can list your accounts but is refused access to their transactions. Generate a new token and update the connection in Settings → Providers → Brex.

​
No accounts found after syncing

If the connection syncs successfully but no accounts appear, click Set up accounts in the connection panel to review unlinked accounts and assign types.