For integrators
API for integrators: connect your own system to Zaksio
API keys with scopes, a public API v1 with idempotency and pagination, and signed webhooks. The full description of endpoints and examples in four languages are in the documentation.
Keys
Access under control
API keys with scopes
A key applies to one company and works like a service user: it can never do more than its scopes allow, or more than the permissions of the person who created it. You only see the full key once.
Restrictions and rotation
Allowlist of IP addresses, expiry, a per-minute request limit, rotation with a transition period and instant revocation. Sensitive actions require your password and a 2FA code.
Log and usage chart
Writes made with a key go to the audit log, and the Settings, "API and integrations" screen shows daily usage.
API v1
What you can do through the API
Products
List, details, adding and changing.
Stock levels
Read the total and the breakdown by warehouse.
Counterparties
Adding, changing and deleting, as long as the counterparty does not appear on any documents.
Sales invoices
List, details and PDF, as well as issuing straight away or saving as a draft. An invoice issued through the API is not sent to KSeF: you send it in the app.
Idempotency and errors
An Idempotency-Key header on writes, cursor pagination and errors in RFC 9457 format with a stable code.
Examples in four languages
Ready-made calls in curl, JavaScript, Python and PHP for every endpoint, plus webhook signature verification code.
Webhooks
Events sent to your system
Events
Invoice issued and paid, counterparty added or changed, product added or changed, and product stock level changed.
HMAC signature with a timestamp
The recipient can verify the origin of a request and reject a replay. Ready-made verification code in four languages is in the documentation.
Retries and delivery log
Up to seven attempts with increasing intervals, manual retry, a test from within the app and automatic disabling after a series of failures.
SSRF protection
The recipient address must be a public https address. Internal addresses and redirects are rejected.
Manage smarter. Grow faster.
You can start with one company and a few invoices.
- Free, no card required
- Free Start plan with no time limit