API Tokens & Webhooks

Use API tokens for programmatic access and webhooks for event-driven automation.

API Tokens

Create and manage API tokens for integrations.

Requirements

• Plan: API Access feature enabled
• Permission: manage_workspace_settings

Creating a Token

1. Go to Workspace Settings > API Tokens
2. Click Create New Token
3. Choose scopes/permissions
4. Save and copy token (shown once)

Best Practices

• Use least-privilege scopes
• Rotate tokens regularly
• Monitor token usage
• Revoke unused tokens

Webhooks

Receive real-time callbacks on workspace events.

Requirements

• Plan: Webhooks feature enabled
• Permission: manage_workspace_settings

Creating a Webhook

1. Go to Workspace Settings > Webhooks
2. Click Add Webhook
3. Enter target URL and select events
4. Save and test delivery

Available Events (examples)

• request.created
• request.updated
• request.status_changed
• client.created
• invoice.created
• payment.completed

Security

• Use HTTPS endpoints
• Verify signatures on requests
• Apply rate limiting
• Implement retries and error handling

Monitoring

• View recent deliveries
• Inspect payloads and responses
• Retry failed deliveries

Troubleshooting

• 400/500 errors: Check endpoint handler and logs
• No deliveries: Confirm events selected and URL reachable
• Signature errors: Verify signing secret and implementation