The open REST API — documented, with scopes and a built-in tester.
Nexoro's REST API can be tested directly in the admin center before a single line of integration code is written — with bearer-token auth, granular scopes for partner and custom integrations, and idempotency keys that make a retried write call safe.
Test it without writing a line of code
The built-in API tester in the admin center sends requests straight to your own tenant's REST API — pick a method and endpoint, fill in query parameters, paste a bearer token, and see the real response before a single line of integration code is written. Every field name is normalized to English, even though the CRM itself runs in German.
- Assemble the method, endpoint, and query parameters right in the browser.
- Paste a bearer token and see your own tenant's real response.
- A German CRM interface, English API field names — consistent on both sides.
Every key sees only what it's meant for
An API key carries scopes like contacts:read, orders:write, or documents:send — the last one deliberately separate from documents:write, since it's the only action that actually reaches a customer. A key can optionally be bound to a CRM user: writes then run with that user's rights and show up in the audit log under their name, and the key automatically stops working once the user is deactivated.
- Granular scopes per resource, from contacts:read to documents:send.
- A key can be bound to a user, including an audit log under their name.
- A missing scope returns 403 and names exactly which scope was required.
