Get your first lead
1
Create an API key
Open Integrations > API, then click Create key.Give the key a clear name. The default read scopes are enough to retrieve leads. Add contact access only if your application needs saved email, phone, or LinkedIn profile data.
2
Copy the key
Copy the full key from the confirmation dialog and store it in a secret manager.traxy shows the full key once. If you lose it, revoke it and create another key.
3
Request one lead
Replace the example key, then run:The lead is in
data[0]. If data is empty, your workspace does not currently have an active lead that matches the request.Open the API reference
Browse every REST endpoint, parameter, scope, and response schema.
Create and revoke keys
Owners and admins can create and revoke API keys. Members can view setup guidance but cannot manage keys. To create a key:- Open Integrations.
- Open API.
- Click Create key.
- Enter a name.
- Select the scopes your application needs.
- Click Create key.
- Copy and store the key.
- Open Integrations > API.
- Find the key.
- Click Revoke.
- Confirm the change.
Choose scopes
New API keys start with read access for leads, analytics, ICP, Watchlist, content, integrations, sync status, Agent status, and workspace access. Add only the permissions your application needs:leads:contact_readreturns saved contact fields and LinkedIn profile URLs.leads:contact_enrichallows contact enrichment and requires lead read and contact read access.leads:manageallows lead quick actions.watchlist:manageallows Watchlist changes.integrations:manageallows webhook destination changes.integrations:deliverallows delivery of a selected lead to a webhook-style destination.agent:runallows a confirmed Agent run.audience_analytics:readreturns aggregate audience analytics.audience_analytics:requeststarts audience discovery.post_qualification:managestarts confirmed qualification for a LinkedIn post.
API keys are for REST requests. Claude and Codex connect through OAuth and do not need an API key.
Paginate results
List endpoints returnpage.nextCursor.
- Send the first request without
cursor. - Copy
page.nextCursorinto the next request. - Keep the same filters and sorting.
- Stop when
page.nextCursorisnull.
Keep keys safe
- Store keys in a secret manager.
- Do not put keys in browser code, source control, documentation, or chat.
- Use separate keys for separate applications.
- Review each key’s Last used date.
- Revoke a key when an application no longer needs access.