Report exports generate a file, such as a CSV, spreadsheet, PDF or zip, from a report and make it available to download. An export is created and then polled until it is complete.

The export object

Required permissions

Exports are scoped to the calling user and account. Creating, reading and downloading an export each recheck the caller’s access to it, including after a role change. A dashboard export requires a dashboard the caller can view.

Create a report export

Beta endpoint. Fully available, but the response shape may still change. Until it is frozen, every response includes Harvest-Api-Stability: beta.

Creates a report export. Returns an export object and a 201 Created response code. The Location header is an absolute URL for the new export.

POST /v2/reports/exports

A known filter placed at the top level of the request rather than inside params is refused. Inherited query parameters such as page are accepted and ignored rather than becoming report filters.

Example Request:

curl -X POST "https://api.harvestapp.com/v2/reports/exports" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Harvest-Account-Id: $ACCOUNT_ID" \
  -H "Content-Type: application/json" \
  -H "User-Agent: MyApp ([email protected])" \
  -d '{"type": "detailed_time_report", "export_format": "csv", "params": {"from": "2026-09-01", "till": "2026-09-30"}}'

Example Response:

{
  "id": 42,
  "type": "detailed_time_report",
  "format": "csv",
  "status": "pending",
  "created_at": "2026-10-16T09:30:00Z",
  "completed_at": null,
  "download_url": null
}

Retrieve a report export

Beta endpoint. Fully available, but the response shape may still change. Until it is frozen, every response includes Harvest-Api-Stability: beta.

Retrieves the status of an export. Returns an export object and a 200 OK response code. Each response signs a fresh one-hour download_url when the export is complete.

GET /v2/reports/exports/{EXPORT_ID}

Example Request:

curl "https://api.harvestapp.com/v2/reports/exports/42" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Harvest-Account-Id: $ACCOUNT_ID" \
  -H "User-Agent: MyApp ([email protected])"

Example Response:

{
  "id": 42,
  "type": "detailed_time_report",
  "format": "csv",
  "status": "complete",
  "created_at": "2026-10-16T09:30:00Z",
  "completed_at": "2026-10-16T09:31:12Z",
  "download_url": "https://harvest-export.s3.amazonaws.com/exports/42/detailed_time_report.csv?X-Amz-Expires=3600&X-Amz-Signature=EXAMPLE"
}

Download a report export

Beta endpoint. Fully available, but the response shape may still change. Until it is frozen, every response includes Harvest-Api-Stability: beta.

Serves the completed export file with attachment headers, and returns a 200 OK response code. Access is rechecked on each request.

GET /v2/reports/exports/{EXPORT_ID}/download

Example Request:

curl -OJ "https://api.harvestapp.com/v2/reports/exports/42/download" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Harvest-Account-Id: $ACCOUNT_ID" \
  -H "User-Agent: MyApp ([email protected])"

Errors