The first public release of the CRM Lead API.
- Pull —
GET /api/agents/crm/leadswith status/stage/search/date filters,lead_line, optionalcustom_fields, and cursor (keyset) pagination vianext_cursor. - Push —
POST /api/agents/crm/leads(single) andPOST /api/agents/crm/leads/bulk(up to 500 rows,dry_run,on_duplicate, per-row results,unknown_custom_fields), both idempotent viaIdempotency-Key. - Webhooks — register/list/update/delete lead webhooks; HMAC-SHA256 signed
lead.createddeliveries (X-Mega-Signature/X-Mega-Timestamp/X-Mega-Delivery) with retries and SSRF-validated URLs. - Rate limits —
RateLimit-*headers on every response and429+Retry-Afteron overage (60/min + 1,000/hour default; 10/min for bulk). - Scoped, customer-locked keys —
public_api:leads:read,public_api:leads:write,public_api:webhooks:manage.