Skip to main content
The PartnerOS REST API lets you programmatically interact with every major resource in your partner ecosystem. You can create and enrich partner records, manage CRM connections, trigger automations, and invoke the same AI pipelines that power the PartnerOS web application — all over HTTPS using standard JSON payloads.

Base URL

All API endpoints are served from:

Making requests

Every request must include the Content-Type: application/json header (except multipart file uploads, which use multipart/form-data). Use the HTTP method specified for each endpoint — GET for reads, POST for creates and actions, and DELETE where supported.
The PartnerOS API uses session-based authentication via a browser cookie. See the Authentication page for how to obtain a session token and pass it with API requests.

Request and response format

Request bodies must be valid JSON. Responses are always JSON objects. Successful responses include the relevant resource data at the top level (for example, { "partner": { ... } } or { "success": true }). Timestamps use ISO 8601 format (2026-05-16T12:00:00.000Z). UUIDs are lowercase with hyphens.

Error format

When a request fails, the API returns a JSON object with an error string and, for some errors, a code field with a machine-readable identifier.
Never expose your session cookie in client-side code or commit it to version control. Treat it with the same care as a private API key.

HTTP status codes

Rate limiting

The API enforces per-organization, per-user rate limits that vary by endpoint. File upload endpoints (such as partner application banner uploads) allow up to 20 requests per minute per user. AI generation endpoints are subject to your plan’s quota. When you exceed a limit the API returns 429 Too Many Requests.

Endpoint groups

If you are integrating for the first time, start with Authentication to understand how sessions work, then move on to the Partners API.