Skip to main content

​
Base URL

All endpoints begin with /api. For local development:

​
Authentication

All endpoints (except where marked Public) require a valid Better Auth session. Include the session cookie in every request — it is set automatically by the browser after login. For programmatic access (e.g. mobile app background services, scripts), pass the session token as a Bearer header:
Read the full auth guide → Authentication

​
Response Format

All responses are JSON. Successful responses return the data directly (object or array). Errors follow this shape:

​
Role-Based Access

Most endpoints check the authenticated user’s role before responding. If your role does not have access, you receive:
The role is always read from the server-side session — never from the request body.

​
API Modules

Leads

Create, list, update, assign, and bulk-import leads. Core of all CRM operations.

Site Visits

Schedule, update, and GPS-verify site visits linked to leads.

Follow-Ups

Create and manage follow-up tasks for individual leads.

Negotiations

Submit and retrieve discount negotiation requests for a lead.

Bookings

Create bookings, upload documents, manage loan cases, agreements, and handovers.

Inventory

Manage projects, towers, units, and possession statuses.

Brokers (CP)

Create and manage the external Channel Partner broker network.

Approvals

Submit and manage discount approval requests and messages.

Marketing — Voice

Create and dispatch AI voice campaigns with full audience and analytics control.

Marketing — WhatsApp

Send broadcasts, manage conversations, flows, templates, and pipelines.

Marketing — SMS

Run SMS campaigns, manage integrations, flows, and track delivery.

Marketing — Email

Send email campaigns, manage integrations, audience, templates, and analytics.

Users & System

User location updates, push tokens, roles, sources, and project lookups.

Webhooks

Inbound webhook endpoints for Meta WhatsApp, SMS gateways, and voice platforms.