← Back to all guides
Integrations & API

Connect safely with the free REST API

WaterMark includes a free public REST API on every plan. Read customers, jobs, invoices, and payments; run checkpointed incremental exports; or exchange a key for a 15-minute access token. Optional automation is deliberately limited to office tasks and non-access customer notes.

Where: Manage company -> Setup -> Webhooks & API (owner only)

  1. Open the menu and choose "Manage company," then find "Webhooks & API" under the Setup section.
  2. Scroll to the "API keys" section.
  3. Type a name so you remember what the key is for (for example "Zapier"), then click "Create key."
  4. Copy the key immediately - it is shown only once. Store it somewhere safe like a password manager.
  5. Send the key on each request as an Authorization header: "Authorization: Bearer wk_...", or exchange it at POST /api/v1/oauth/token for a 15-minute access token.
  6. Call the read endpoints for customers, jobs, invoices, and payments. Use /api/v1/export/{resource} when another system needs an incremental feed with a stable checkpoint.
  7. For Zapier actions, create a separate key with the optional automation scope. Every action must include an Idempotency-Key.
Good to know
  • A key is scoped to your company only - it can never read another company's data.
  • The general customer/job/invoice API remains read-focused. The automation scope can only create an office task or append a non-access customer note; it cannot create or edit customers, jobs, invoices, payments, access instructions, or credentials.
  • Incremental exports describe current rows and do not emit delete tombstones. Run a periodic full reconciliation when a downstream system must detect deletions.
  • Requests are rate-limited (about 120 per minute per key). See the public docs at the /developers page for details.
  • Only the company owner can create or manage API keys.