List employee expenses

Lists employee expenses, newest first, optionally for one user and a date range, one page at a time.

Returns employee expenses (not project expenses) ordered by date descending, with the receipt download URLs of each one. Filter with userID (a user ID) and an inclusive startDate / endDate on the expense date. Without userID the list spans the whole account — see the access note: the call does not restrict the result to the caller.

Use it to:

Finance / payroll integration pulling the expenses of a period for reimbursement or posting (filter by date, then by Status = Approved on your side)

Not for:

One expense by ID — GET /v1/employee-expense/{employeeExpenseID} (it enforces the owner check)
Filtering by approval status, project or expense type — not supported; filter client-side

Behaviour:

Idempotent.
Safe to retry.
Changes are visible to the next read immediately.

Call first: GET /v1/user

Next: GET /v1/employee-expense/{employeeExpenseID}, PUT /v1/employee-expense

Not yet documented: request → query params → $expand.

curl -X GET "https://app3.timelog.com/your-account/api/v1/employee-expense?userID=123&startDate=2024-12-25T10%3A00%3A00Z&endDate=2024-12-25T10%3A00%3A00Z&$page=1&$pagesize=10&$expand=project" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_TOKEN"

import requests
import json

url = "https://app3.timelog.com/your-account/api/v1/employee-expense?userID=123&startDate=2024-12-25T10%3A00%3A00Z&endDate=2024-12-25T10%3A00%3A00Z&$page=1&$pagesize=10&$expand=project"
headers = {
  "Content-Type": "application/json",
  "Authorization": "Bearer YOUR_API_TOKEN"
}

response = requests.get(url, headers=headers)
print(response.json())

const response = await fetch("https://app3.timelog.com/your-account/api/v1/employee-expense?userID=123&startDate=2024-12-25T10%3A00%3A00Z&endDate=2024-12-25T10%3A00%3A00Z&$page=1&$pagesize=10&$expand=project", {
  method: "GET",
  headers: {
  "Content-Type": "application/json",
  "Authorization": "Bearer YOUR_API_TOKEN"
}
});

const data = await response.json();
console.log(data);

package main

import (
    "fmt"
    "net/http"
)

func main() {

    req, err := http.NewRequest("GET", "https://app3.timelog.com/your-account/api/v1/employee-expense?userID=123&startDate=2024-12-25T10%3A00%3A00Z&endDate=2024-12-25T10%3A00%3A00Z&$page=1&$pagesize=10&$expand=project", nil)
    if err != nil {
        panic(err)
    }

    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    fmt.Println("Response Status:", resp.Status)
}

require 'net/http'
require 'json'

uri = URI('https://app3.timelog.com/your-account/api/v1/employee-expense?userID=123&startDate=2024-12-25T10%3A00%3A00Z&endDate=2024-12-25T10%3A00%3A00Z&$page=1&$pagesize=10&$expand=project')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true

request = Net::HTTP::Get.new(uri)
request['Content-Type'] = 'application/json'
request['Authorization'] = 'Bearer YOUR_API_TOKEN'

response = http.request(request)
puts response.body

{
  "Properties": {
    "TotalRecord": "example_string",
    "TotalPage": "example_string",
    "PageNumber": "example_string"
  },
  "Entities": [
    {
      "Properties": {
        "EmployeeExpenseID": 123,
        "Date": "2024-12-25T10:00:00Z",
        "Amount": 3.14,
        "VatAmount": 3.14,
        "IsBillable": true,
        "Number": "example_string",
        "Comment": "null",
        "ExchangeRate": 3.14,
        "CurrencyID": 123,
        "EmployeeUserID": 123,
        "ExpenseTypeID": 123,
        "PaymentMethodID": 123,
        "ProjectID": 123,
        "ProjectSubContractID": 123,
        "FileUrls": [
          "null"
        ],
        "IsFileUrlLoaded": true,
        "ImageUrls": [
          "null"
        ],
        "IsImageUrlLoaded": true,
        "HasReceiptPictures": true,
        "Status": "Pending",
        "Project": {
          "ProjectID": 123,
          "ID": "123e4567-e89b-12d3-a456-426614174000",
          "Name": "John Doe",
          "No": "example_string",
          "ExpenseIsBillable": "null",
          "CustomerID": 123,
          "Customer": {
            "CustomerID": 123,
            "ID": "123e4567-e89b-12d3-a456-426614174000",
            "Name": "John Doe",
            "No": "example_string",
            "DefaultMileageDistance": 25,
            "CustomerStatusID": 123,
            "VATNo": "example_string",
            "OrganizationNo": "example_string"
          },
          "MainContractId": 123
        },
        "Currency": {
          "CurrencyID": 123,
          "CurrencyABB": "example_string",
          "DescriptiveName": "John Doe",
          "CurrentRate": 3.14,
          "IsActive": true
        },
        "ExpenseType": {
          "ExpenseTypeID": 123,
          "ExpenseTypeName": "John Doe",
          "ShowInTravel": true,
          "AccountNo": "example_string",
          "VAT": 3.14,
          "ProductNo": "example_string",
          "SalaryCode": "example_string",
          "IsActive": true,
          "IsEquipment": true,
          "CostPrice": 29.99,
          "SalesPrice": 29.99,
          "EquipmentText": "example_string"
        },
        "PaymentMethod": {
          "PaymentMethodID": 123,
          "Name": "John Doe",
          "IsPaidByEmployee": true,
          "IsDefaultForEmployeeExpense": true,
          "IsDefaultForProjectExpense": true,
          "IsActive": true,
          "IsDefaultForImport": true,
          "IsPersonalCreditCard": true,
          "CreditCardEmployeeUserID": "null"
        }
      },
      "Links": [
        {
          "Href": "example_string",
          "Rel": "example_string"
        }
      ],
      "Actions": [
        {}
      ]
    }
  ],
  "Links": [
    {
      "Href": "example_string",
      "Rel": "example_string"
    }
  ]
}

GET

/v1/employee-expense

GET

Base URLstring

Target server for requests. Edit to use your own host.

Bearer Token

OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. JWT and reference tokens are both accepted. The token must carry the required scope (default tlp). The token's sub claim is the acting user. A token WITHOUT sub (client-credentials) acts as the system service user. If the sub user cannot log in (inactive, locked, deleted), the request is rejected with 401 — it is no longer let through without a user. > Not yet documented: how to obtain a token. > Not yet documented: token lifetime.

query

userIDinteger

Only expenses of this user (a USER ID). Omitted = all employees. Filters on EmployeeExpenseRead.EmployeeUserID (eq).

Format: int32

query

startDatestring

Inclusive lower bound on the expense date. Stored dates have no time part, so send a date. Filters on EmployeeExpenseRead.Date (gte).

Format: date-time

query

endDatestring

Inclusive upper bound on the expense date. Send a date without time: a time part still matches the whole stored day (stored values are midnight). Filters on EmployeeExpenseRead.Date (lte).

Format: date-time

Page number.

Page size. No maximum enforced in the API layer.

query

$expandstring

Comma-separated list of nested objects to embed. Several values: one string, separated by ,. Allowed values: | Value | Name | Meaning | |---|---|---| | project | project | Fill Project (and its customer). | | currency | currency | Fill Currency. | | expenseType | expenseType | Fill ExpenseType. | | paymentMethod | paymentMethod | Fill PaymentMethod. |

Options: project, currency, expenseType, paymentMethod

Request Preview

Response

Response will appear here after sending the request

Authentication

header

Authorizationstring

Required

Bearer token. OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. JWT and reference tokens are both accepted. The token must carry the required scope (default tlp).

The token's sub claim is the acting user. A token WITHOUT sub (client-credentials) acts as the system service user. If the sub user cannot log in (inactive, locked, deleted), the request is rejected with 401 — it is no longer let through without a user.

Not yet documented: how to obtain a token.

Not yet documented: token lifetime.

Query Parameters

userIDinteger

Only expenses of this user (a USER ID). Omitted = all employees.

Filters on EmployeeExpenseRead.EmployeeUserID (eq).

startDatestring

Inclusive lower bound on the expense date. Stored dates have no time part, so send a date.

Filters on EmployeeExpenseRead.Date (gte).

endDatestring

Inclusive upper bound on the expense date. Send a date without time: a time part still matches the whole stored day (stored values are midnight).

Filters on EmployeeExpenseRead.Date (lte).

$pageinteger

Page number.

$pagesizeinteger

Page size. No maximum enforced in the API layer.

$expandstring

Comma-separated list of nested objects to embed.

Several values: one string, separated by ,.

Allowed values:

Value	Name	Meaning
`project`	project	Fill Project (and its customer).
`currency`	currency	Fill Currency.
`expenseType`	expenseType	Fill ExpenseType.
`paymentMethod`	paymentMethod	Fill PaymentMethod.

Allowed values:projectcurrencyexpenseTypepaymentMethod

Responses

Propertiesobject

Paging values. They are returned as STRINGS, for example "TotalRecord": "12".

Entitiesarray

Omitted (not []) when the list is empty.

Linksarray

Was this page helpful?