# MEGA Developers

> Developer documentation for the MEGA public CRM Lead API — pull leads, push leads, and receive lead webhooks.

## Docs

- [Bulk create / merge leads](https://dev.gomega.ai/api-reference/leads/bulk-create-merge-leads.md): Import up to 500 leads in one request. Requires the `public_api:leads:write` scope. Uploaded leads are inert (no downstream automation). Use `dry_run: true` to preview, `on_duplicate` to control merge behavior, and `Idempotency-Key` to make retries safe. Subject to a stricter per-minute rate limit t…
- [Create a single lead](https://dev.gomega.ai/api-reference/leads/create-a-single-lead.md): Creates one lead (or merges into an existing lead by email / phone-last-10). Requires the `public_api:leads:write` scope. Send an `Idempotency-Key` so a retry returns the original result instead of double-creating.
- [List / search leads](https://dev.gomega.ai/api-reference/leads/list-search-leads.md): Returns leads for the authenticated customer. Requires the `public_api:leads:read` scope. Use `sort_by=updated_at&sort_dir=asc` with `cursor` for stable incremental polling.
- [Delete a webhook](https://dev.gomega.ai/api-reference/webhooks/delete-a-webhook.md): Soft-deletes a webhook. Requires the `public_api:webhooks:manage` scope.
- [List webhooks](https://dev.gomega.ai/api-reference/webhooks/list-webhooks.md): Lists the caller's registered lead webhooks. Signing secrets are never returned. Requires the `public_api:webhooks:manage` scope.
- [Register a webhook](https://dev.gomega.ai/api-reference/webhooks/register-a-webhook.md): Registers a webhook URL for `lead.created` events. The URL is SSRF-validated (must be public HTTPS). The signing `secret` is returned EXACTLY ONCE — store it. Requires the `public_api:webhooks:manage` scope.
- [Update / rotate a webhook](https://dev.gomega.ai/api-reference/webhooks/update-rotate-a-webhook.md): Updates a webhook. Set `rotate_secret: true` to mint a fresh signing secret (returned once). Requires the `public_api:webhooks:manage` scope.
- [Authentication](https://dev.gomega.ai/authentication.md): Authenticate with a Personal Access Token and the x-customer-id header.
- [Changelog](https://dev.gomega.ai/changelog.md): Notable changes to the MEGA public CRM Lead API.
- [Errors](https://dev.gomega.ai/errors.md): The consistent error envelope returned by every endpoint.
- [Overview](https://dev.gomega.ai/overview.md): The MEGA public CRM Lead API — pull leads, push leads, and receive lead webhooks.
- [Pull leads](https://dev.gomega.ai/pull-leads.md): List, search, filter, and paginate your leads.
- [Push leads](https://dev.gomega.ai/push-leads.md): Create a single lead or bulk-import up to 500, safely with idempotency.
- [Quickstart](https://dev.gomega.ai/quickstart.md): Make your first pull and push request in a couple of minutes.
- [Rate limits](https://dev.gomega.ai/rate-limits.md): Per-key limits, the RateLimit headers, and handling 429s.
- [Webhooks](https://dev.gomega.ai/webhooks.md): Receive lead.created events, verify the HMAC signature, and handle retries.

## OpenAPI Specs

- [openapi](https://dev.gomega.ai/openapi.json)