CFTOKEN explained

Some MYOB files require a second level of user details to gain access to them.

The CFTOKEN is the header that will pass this data for you.

Here is what that Login window looks like from the UI.

The MYOB User can only utilise this function by navigating to the SETUP>USER ACCESS menu of their Software, creating a user and unselecting the "This User will sign on with a my.MYOB account" option.

This detail is replicated in the API by passing the CFTOKEN header:
Here is how you format the header: x-myobapi-cftoken:      [Base64Encode(username:password)]

This is an example of standard headers for an Online file that requires the CFTOKEN header:

NOTE:
Not every file requires the CFTOKEN to be passed, you will need to communicate with the MYOB Client and confirm how they log into their Company file.

If you have any questions, feel free to log a ticket with the Customisation & Integration Team.