API overview
The ImmPilot REST API for read and write access to your workspace data.
The REST API exposes the same data model that powers the application, scoped to your workspace and authenticated with a workspace API key. Every endpoint respects the same permissions as the requesting user.
Authentication
API keys are created at Settings → API Keys. Each key can be scoped to a specific set of permissions and rotated at any time. Include the key as a Bearer token in the Authorization header.
Rate limits
Default rate limits are 60 requests per minute per key and 10,000 requests per day per workspace. Enterprise workspaces can request elevated limits.
Webhooks
For event-driven integrations, subscribe to webhooks that fire on case, document, and payment events. Webhook payloads are signed with a shared secret so you can verify authenticity.
Getting help
Full endpoint documentation and code samples are available at /docs/api-reference. Sample integrations for common accounting and CRM tools are available on request.