List all expenses

GET/legal/{connection_id}/expense

Parameters

Returns

LegalExpensearray

idstring

created_atdate-time

(ISO-8601 / YYYY-MM-DDTHH:MM:SSZ format)

updated_atdate-time

(ISO-8601 / YYYY-MM-DDTHH:MM:SSZ format)

matter_idstring

pointer to the Legal Matter this expense is recorded against

user_idstring

HR Employee who incurred or recorded the expense (reference to HrisEmployee)

descriptionstring

incurred_atdate-time

date the expense was incurred (ISO-8601 / YYYY-MM-DDTHH:MM:SSZ format)

quantitynumber

price_amountnumber

unit price

total_amountnumber

currencystring

type enum

Valid values:

"HARD_COST"

"SOFT_COST"

"OTHER"

categorystring

the vendor's expense category name

is_billableboolean

is_billedboolean

invoice_idstring

pointer to the Accounting Invoice this expense was billed on (reference to AccountingInvoice)

expense_codestring

UTBMS/LEDES expense code

metadata array

custom field values

raw

Errors

Errors return the HTTP status code and a JSON body with statusCode, error (the short label) and message (a human-readable detail).

{
  "statusCode": 429,
  "error": "Too Many Requests",
  "message": "Too many requests to unified.to API; max requests per minute: N"
}

Status	Error	Meaning
`400`	Bad Request	The request was malformed or failed validation.
`401`	Unauthorized	The connection is likely broken; re-authorize it.
`403`	Forbidden	The connection is missing permissions or scopes.
`404`	Not Found	The requested resource does not exist.
`429`	Too Many Requests	Rate limit exceeded (see the two sources below).
`500`	Internal Server Error	An unexpected error occurred.
`501`	Not Implemented	Not supported by this integration.

Errors from the underlying integration pass through: the integration's status comes back as ours (429, 401, 403, 404 or 5xx), usually with its message. When the integration's error body is unclear, Unified extracts what it can and returns a clearer message.

429 Too Many Requests

A 429 has two possible sources:

The integration's own rate limit, passed through.
Unified's workspace limit: a rolling 60 seconds, set by plan, with the message Too many requests to unified.to API; max requests per minute: N.

const options = {
  method: 'GET',
  url: 'https://api.unified.to/legal/5de520f96e439b002043d8dc/expense',
  headers: {
    authorization: 'bearer .....'
  },
  params: {
    limit: 50,
    offset: 0,
    updated_gte: '2026-10-11T02:29:56.272Z',
    sort: 'updated_at',
    order: 'asc',
    query: '',
    matter_id: '',
    user_id: '',
    type: '',
    fields: '',
    raw: '',
  }
};

const results = await axios.request(options);

Code Samples

Node.js SDK

import { UnifiedTo } from '@unified-api/typescript-sdk';

const sdk = new UnifiedTo({
    security: {
        jwt: '<YOUR_API_KEY_HERE>',
    },
});

const connectionId = '5de520f96e439b002043d8dc';

const results = await sdk.legal.listLegalExpenses({ connectionId, 
    limit: 50,
    offset: 0,
    updated_gte: '2026-10-11T02:29:56.272Z',
    sort: 'updated_at',
    order: 'asc',
    query: '',
    matter_id: '',
    user_id: '',
    type: '',
    fields: '',
    raw: '',
 });

Node.js (axios)

const options = {
  method: 'GET',
  url: 'https://api.unified.to/legal/5de520f96e439b002043d8dc/expense',
  headers: {
    authorization: 'bearer .....'
  },
  params: {
    limit: 50,
    offset: 0,
    updated_gte: '2026-10-11T02:29:56.272Z',
    sort: 'updated_at',
    order: 'asc',
    query: '',
    matter_id: '',
    user_id: '',
    type: '',
    fields: '',
    raw: '',
  }
};

const results = await axios.request(options);

Java

AsyncHttpClient client = new DefaultAsyncHttpClient();

client.prepare("GET", "https://api.unified.to/legal/5de520f96e439b002043d8dc/expense?limit=50&offset=0&updated_gte=2026-10-11T02:29:56.272Z&sort=updated_at&order=asc&query=&matter_id=&user_id=&type=&fields=&raw=")
  .setHeader("accept", "application/json")
  .setHeader("authorization", ".....")
  .execute()
  .toCompletableFuture()
  .thenAccept(System.out::println)
  .join();

client.close();

Go

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

url := `https://api.unified.to/legal/5de520f96e439b002043d8dc/expense?limit=50&offset=0&updated_gte=2026-10-11T02:29:56.272Z&sort=updated_at&order=asc&query=&matter_id=&user_id=&type=&fields=&raw=

req, _ := http.NewRequest("GET", url, nil)

req.Header.Add("accept", "application/json")
req.Header.Add("authorization", ".....")

res, _ := http.DefaultClient.Do(req)

defer res.Body.Close()
body, _ := ioutil.ReadAll(res.Body)

Python

import requests

url = "https://api.unified.to/legal/5de520f96e439b002043d8dc/expense?limit=50&offset=0&updated_gte=2026-10-11T02:29:56.272Z&sort=updated_at&order=asc&query=&matter_id=&user_id=&type=&fields=&raw="

headers = {
    "accept": "application/json",
    "authorization": "....."
}

response = requests.get(url, headers=headers)

PHP

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.unified.to/legal/5de520f96e439b002043d8dc/expense?limit=50&offset=0&updated_gte=2026-10-11T02:29:56.272Z&sort=updated_at&order=asc&query=&matter_id=&user_id=&type=&fields=&raw=",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "accept: application/json",
    "authorization: ....."
  ],
]);

Ruby

require 'uri'
require 'net/http'
require 'openssl'

url = URI("https://api.unified.to/legal/5de520f96e439b002043d8dc/expense?limit=50&offset=0&updated_gte=2026-10-11T02:29:56.272Z&sort=updated_at&order=asc&query=&matter_id=&user_id=&type=&fields=&raw=")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["accept"] = 'application/json'
request["authorization"] = '....'

response = http.request(request)
puts response.read_body

cURL

curl --request GET \
  --url 'https://api.unified.to/legal/5de520f96e439b002043d8dc/expense?limit=50&offset=0&updated_gte=2026-10-11T02:29:56.272Z&sort=updated_at&order=asc&query=&matter_id=&user_id=&type=&fields=&raw=' \
  --header 'accept: application/json' \
  --header 'authorization: .....'

Are we missing anything? Let us know

Was this page helpful?