Custara documentation
Custara is an accounts-payable system. It ingests supplier invoices, scores risk, applies a versioned approval policy, and settles approved bills in USDC on Arc through Circle. Nigeria bank movement is an export file unless a licensed live flag is turned on.
This handbook is the operator and integrator reference.
Who should read what
| Reader | Start here |
|---|---|
| Operator standing up a workspace | Getting started |
| Finance, approver, or payer | Home, Inbox, Approvals, Console |
| Treasurer or payer moving USDC | Payments and treasury |
| Security or compliance | Security, Audit |
| Engineer integrating an ERP or service | Partner API, Webhooks, CLI |
| Platform operator | Operations |
Map
- Getting started — install, database, worker, first sign-in
- Invoice lifecycle — statuses, risk, policy, timing
- Console — workspace map
- Work, Money, and Admin in the docs sidebar — each screen in the Go to menu
- Payments and treasury — Arc USDC, allowlist, autopay, balances
- Security — sessions, MFA threshold, API keys, encryption
- Partner API — authentication, scopes, endpoints, idempotency
- CLI —
custaracommand for the same operations - Webhooks — events, signing, delivery
- Connectors — email, SFTP, ERP, accounting, WhatsApp
- Audit — hash chain, export, verification
- Operations — processes, health, production checklist
Reference:
- Agent payments — task queue, Circle transfer, reconcile
- ERP adapters — Odoo connector, SAP, and Dynamics field maps
- Odoo app — optional Apps module (Arc testnet labeled)
- Release verification
- SOC 2 readiness
Operating boundaries
Bank account numbers and webhook secrets are encrypted at rest. Production workspace creation for an unknown email is off unless ALLOW_JIT_ORG_CREATION=true. Each email belongs to one workspace. SOC 2 Type I and Type II reports are not issued; the control map is in SOC 2 readiness.