Heft

Help › Connections › Connect Qonto

Connect Qonto

With a Qonto API key, Heft reads your company's Qonto accounts and payments on its own. Setting it up takes a few minutes. An API key is a way in for programs like Heft; Heft doesn't need your Qonto password for it.

Updated 18 Oct 2026

What you need

Qonto on a computer
The Qonto web app at app.qonto.com. Qonto says you can't reach the API settings from its phone app.
Your role in Qonto
Account Owner or Admin. In Qonto, Managers and Employees can't connect tools like Heft.
Plan
Qonto offers the key on its Basic, Smart, Premium, Essential, Business and Enterprise plans. On Basic you generate it once yourself; on the others it's already there.

Get the key in Qonto

  1. Open Qonto

    Sign in at app.qonto.com on a computer. If you have several organizations, pick your company's.

  2. Go to the API key

    Click Settings (the gear, bottom left), then Integrations and Partnerships › API key.

  3. Generate the key if needed

    If no secret key shows yet, click Generate. Depending on your settings, Qonto asks you to confirm on your phone.

  4. Copy the login and the key

    Your login is your organization's name followed by a number. Copy it and the secret key. Neither is your email address or your password.

Paste it into Heft

  1. Pick Qonto

    In Heft, go to Settings › Connections › Bank accounts, tap Connect a bank and pick Qonto. Heft also offers this in the chat when it first asks about your payments.

  2. Paste the key

    Paste the login and the secret key into the fields Login and Secret key, then tap Connect Qonto. Heft checks the key with Qonto.

  3. Tick your accounts

    Heft asks which accounts are your company's. Nothing is ticked: tick your company's accounts and tap Use these accounts. Heft reads only those.

What Heft does with the key

Heft only reads: the Qonto accounts you ticked, their balances and their payments. Heft's code sends Qonto read requests only and blocks any other.

The key itself is not read-only, though. Qonto's API also lets anyone with the key move money between your company's own Qonto accounts, upload attachments or create clients, for example. The key can't add a new payee or send money to anyone else.

Heft treats the login and secret key like all login details: it encrypts them with a key of their own, kept apart from the database. A copy of the database can't open them.

Only the part of Heft that reads from Qonto in the background can open the key; the part the app talks to can't. Heft never shows the key again and never gives it to an AI model.

A key doesn't belong in the chat. If you write something there that looks like a key or a password, Heft doesn't take the message: it doesn't keep it, sends it to no AI model, and tells you where the key goes.

More on security

Ending or renewing the connection

In Heft

Go to Settings › Connections, tap Disconnect next to Qonto, then Disconnect Qonto entirely. Heft deletes the key. At Qonto it keeps working until you generate a new one there.

In Qonto

Under Integrations and Partnerships › API key, click Regenerate. Qonto makes a new key and the old one stops working, also for any other program that uses it, such as accounting software.

If Qonto stops accepting the key

For example because you generated a new one in Qonto. Heft then shows this under Connections and deletes the old key; nothing already in Heft is lost. Tap Paste a new key and paste the new one, and Heft carries on reading your accounts.

Your bank isn't Qonto?

Then you bring Heft your bank statement each month. Upload it in the chat or under Settings › Connections › Bank statements, as a PDF or as a file from your online banking (CAMT, CSV or MT940), or forward it as a PDF or CAMT file to your Heft address. After your first statement, Heft asks you on the 3rd of each month for the previous month's statement.