# meniga.is — Meniga (card aggregator)

Credit card transactions, accounts and categories via Meniga (Arion's card
platform). Access tokens last ~2 minutes; the refresh token lasts ~14 days and
**rotates on every use** — the recipe writes the new one back to the keychain.

```bash
ab-plus login meniga.is       # store MENIGA_REFRESH_TOKEN in the keychain
ab-plus run meniga.is/transactions --input '{"periodFrom":"2026-08-01","periodTo":"2026-08-21"}'
```

If the refresh token expires (401), recovery is a human step: open
web.meniga.is, DevTools → Network, copy the `Authorization` header and the
`/authentication/refresh` request body, then `ab-plus login meniga.is`.

## Ops

| Op | Risk | Notes |
|---|---|---|
| `transactions` | read-only | Paginate with `take`/`skip` (500/page) |
| `accounts` | read-only | Cards + balances |
| `categories` | read-only | Category tree |

## Gotchas

- `hasUncertainCategorization` transactions should be surfaced for human review.
- Dedup by transaction `id` when merging month files.