Skip to main content

Developer API

Developer endpoints exposed by the Devotel CPaaS API Base path: /api/v1/developers Endpoint count: 16

API analytics by API key

GET /api/v1/developers/api-analytics/by-key
Per-API-key usage attribution for your organization — rolling request counts (today / 7d / 30d) bucketed by key and joined to each key’s human-readable name, prefix, last-four, last-used timestamp, and last-used IP. Powers the “By app” panel so you can see which key is driving traffic. Unattributed dashboard/session traffic and rotated/deleted keys surface as sentinel rows. Requires an authenticated owner, admin, developer, or viewer session.
string
Bounds the SQL scan range; today/7d/30d counts are always returned regardless of this value.
string
Which column to sort the keys by (descending).
integer
Maximum number of key rows to return.
boolean
Include keys that have been revoked, rotated, or deleted. Send true/1 to enable; any other value (including false) is treated as false.

API analytics by endpoint

GET /api/v1/developers/api-analytics/endpoints
Per-endpoint API-usage breakdown for your organization — request count, error count, error rate, and p50/p95/p99 latency for each method+path over the selected window. Sort by volume, errors, or latency to find the endpoints worth optimising. Requires an authenticated owner, admin, developer, or viewer session.
string
Rolling time window to aggregate over.
string
Which column to sort the rows by (descending).
integer
Maximum number of endpoint rows to return.

API analytics overview

GET /api/v1/developers/api-analytics/overview
Headline API-usage metrics for your organization over the selected window — total request volume, a separate programmatic API-key request count, today’s calls, the success/error split, average and percentile latency, and the busiest endpoints. Powers the developer hub’s usage cards. Requires an authenticated owner, admin, developer, or viewer session.
string
Rolling time window to aggregate over.

API analytics rate-limit usage

GET /api/v1/developers/api-analytics/rate-limits
Rate-limit rejection breakdown for your organization — the total number of HTTP 429 responses over the window plus a per-endpoint count of which method+paths hit their limit most. Use it to spot which callers or endpoints need higher limits or client-side backoff. Requires an authenticated owner, admin, developer, or viewer session.
string
Rolling time window to aggregate over.
integer
Maximum number of endpoint rows to return.

API analytics time series

GET /api/v1/developers/api-analytics/timeseries
Time-bucketed, gap-filled API-usage series for your organization — one point per hour or day with request count and error count. Use it to chart request volume and error rate over the selected window. groupBy defaults to hourly for the 24h window and daily for wider windows. Requires an authenticated owner, admin, developer, or viewer session.
string
Rolling time window to aggregate over.
string
Bucket granularity. Defaults to hour for the 24h window and day for wider windows.

List available CDP client tracking SDKs

GET /api/v1/developers/cdp-sdk/catalog
Templating-free summary of the drop-in, Segment-compatible client tracking SDKs on offer (platform, filename, language, and the identify/track/page methods each exposes). Use it to render a “install a tracking SDK” picker before downloading a specific platform’s source. Requires an authenticated owner, admin, or developer session.

Download a CDP client SDK source for a platform

GET /api/v1/developers/cdp-sdk/source/{platform}
Returns the drop-in, Segment-compatible client tracking SDK source for web, ios, or android, pre-wired to your tenant’s public ingest host. Drop the file into your app to start sending identify/track/page events; the public key is a paste-in placeholder, so the source embeds no credential. Sent as a file attachment. Requires an authenticated owner, admin, or developer session.
string
required
Target platform for the generated SDK source.

List connector triggers and actions

GET /api/v1/developers/connector/catalog
Lightweight, templating-free summary of every trigger and action the Zapier, Make, and n8n connectors expose, plus the API-key auth header they use. Use it to render a “what can I automate?” preview in your own UI without downloading the full platform blueprints. Requires an authenticated owner, admin, or developer session.

Download the Make (Integromat) app blueprint

GET /api/v1/developers/connector/make
Returns the Make custom-app blueprint JSON for your organization, pre-wired to your API host. Import it into Make to build a custom app whose modules call the Orbit messages, contacts, and verify endpoints. The file is sent as an attachment (orbit-<slug>.make-app.json) and embeds no credential. Requires an authenticated owner, admin, or developer session.

Download the n8n node-pack definition

GET /api/v1/developers/connector/n8n
Returns the n8n node-pack definition JSON (the n8n-nodes-orbit community package) for your organization, pre-wired to your API host. Use it to install an Orbit trigger + action node in a self-hosted or cloud n8n instance that calls the messages, contacts, and verify endpoints. The file is sent as an attachment (orbit-<slug>.n8n-nodes.json) and embeds no credential. Requires an authenticated owner, admin, or developer session.

Download the Zapier app definition

GET /api/v1/developers/connector/zapier
Returns the Zapier Platform app-definition JSON for your organization, pre-wired to your API host: triggers subscribe over the webhook event catalog and actions route to the messages, contacts, and verify endpoints. Use it to seed a zapier push app so customers can automate Orbit from Zapier. The file is sent as an attachment (orbit-<slug>.zapier-app.json) and embeds no credential — the installer pastes their own API key. Requires an authenticated owner, admin, or developer session.

GET /api/v1/developers/oauth/consent-preview
Renders the install/consent-screen rows for a space-delimited scope request and flags any scopes outside the grantable catalog (which a real authorization request would reject). Use it to preview exactly what a customer will see and approve before you point them at the authorization endpoint. Requires an authenticated owner, admin, or developer session.
string
Space-delimited scope request, e.g. messages:read contacts:write. URL-encode the spaces (%20).

Download the OAuth app-registration manifest

GET /api/v1/developers/oauth/manifest
Returns the deterministic OAuth 2.0 client-registration manifest (RFC 7591-shaped) for building a marketplace app, pre-wired to your API host with the standard authorization-code + PKCE flow metadata and the full grantable-scope catalog. Fill in the client name, redirect URIs, and scope, then submit it to register an app customers install with a scoped grant instead of a full-access API key. Sent as a downloadable attachment (orbit-<slug>.oauth-app.json) that embeds no credential. Requires an authenticated owner, admin, or developer session.

List grantable OAuth scopes

GET /api/v1/developers/oauth/scopes
Returns the closed catalog of scopes a marketplace app may request via the authorization-code flow, each with its consent-screen label, the consent sentence shown to the installer, and the effective role it resolves to (read → viewer, write → developer). Use it to build a scope picker or to preview what an installed app can access before you publish it. admin, the * wildcard, and billing are deliberately never grantable to a third-party app. Requires an authenticated owner, admin, or developer session.

Download a Postman collection for this workspace

GET /api/v1/developers/postman-collection
Returns a Postman Collection v2.1 JSON document with every public API endpoint pre-configured for your organization and grouped into folders by resource. Auth is wired as an X-API-Key header referencing an {{orbit_api_key}} variable, so you import the collection, set that variable, and start calling the API. Sent as a downloadable attachment (orbit-<slug>.postman_collection.json) that embeds no credential. Requires an authenticated owner, admin, or developer session.

Download a Postman environment for this workspace

GET /api/v1/developers/postman-environment
Returns a Postman Environment JSON document pre-filled with your API base URL and organization id. The API-key variable is marked as a Postman secret and left blank so you paste your own key after importing. Pair it with the Postman collection to call the API without editing any request. Sent as a downloadable attachment (orbit-<slug>.postman_environment.json). Requires an authenticated owner, admin, or developer session.