API Reference

Getting started

The DashCRM API lets you do two things:

1. Display your stocklist on your own website

2. Import contacts from tools like Make, Zapier, or n8n

All API requests go to:

https://app.dashcrm.co/api/v1

Authentication

Every request needs an API key. Include it as a header:

http

Authorization: Bearer YOUR_API_KEY

You can create API keys in DashCRM under Settings > Integrations.

API Key Types

Read-Only Key (publishable_read_only)

Use this for your website. This key can only read data - it cannot create or modify contacts.

Safe to use in browser/frontend code

Can read your stocklist and project details

Works with open CORS so your website can make requests directly

Read & Write Key (secret_read_write)

Use this for automations and integrations. This key can read data and import contacts.

Warning

Do not use this in browser or frontend code - treat it like a password. Use it in server-side code, Make, Zapier, n8n, or similar tools.

Rate Limits

Limits on how many requests you can make per minute:

Stocklist/project reads (read-only key): 60/min per visitor, 600/min total

Stocklist/project reads (read & write key): 120/min

Contact imports: 20/min

If you go over the limit, you'll get a 429 Too Many Requests response. Check the Retry-After header to see how many seconds to wait before trying again.

Stocklist & project endpoints