Build against the published My Fieldwire API contract.

curl -X POST "https://api.myfield.webcare.live/integrations/public-api/access-token" \
  -H "Content-Type: application/json" \
  -d '{
    "refreshToken": "mfw_prt_your_refresh_token_here"
  }'

Store refresh tokens securely and re-exchange them when an access token expires. Legacy PAT compatibility is not available on the current contract.

import { ApiClient } from "@app/sdk";

const baseUrl = "https://api.myfield.webcare.live";
const refreshToken = process.env.MFW_REFRESH_TOKEN ?? "";

async function main() {
  const authClient = new ApiClient({ baseUrl });
  const { accessToken } = await authClient.exchangePublicApiAccessToken({
    refreshToken
  });

  const api = new ApiClient({
    baseUrl,
    getAccessToken: async () => accessToken
  });

  const upload = await api.createFileUploadIngress({
    tenantId: "tenant-id",
    projectId: "project-id",
    fileName: "issued-set.pdf",
    contentType: "application/pdf",
    sizeBytes: 1048576
  });

  await api.createPlanIngest({
    tenantId: "tenant-id",
    projectId: "project-id",
    uploadId: upload.uploadId,
    title: "Issued for review"
  });

  await api.createWebhookSubscription({
    tenantId: "tenant-id",
    name: "Task events",
    targetUrl: "https://example.com/webhooks/my-fieldwire",
    projectFilters: ["project-id"],
    eventFilters: ["task.created", "task.updated"]
  });
}

void main();

• Account owners and managers mint refresh tokens for account and project workflows.
• Project-scoped credentials can request project and workflow scopes such as files.read, plans.write, specs.read, reports.export, and search.read.
• Tenant and account admin permissions such as integrations.manage and audit.read are rejected for project-scoped tokens.
• Plans and specification ingestion use asynchronous processing after the create call returns.