Tracopus · Integration API

Interactive console for every scoped token API

Paste the one-time secret from Integrations → API access. Pick an endpoint, inspect request/response/errors, generate curl, and optionally send a live call. Integration keys cannot call /developer-portal/*.

Bearer tk_live_ / tk_test_ Catalog scopes v2 envelope

API base Integration secret (from Create token) Team id Employee id

Choose an API

Select an endpoint from the catalog

Request, response, errors, and a live try-it console fill in as soon as you pick one.

Scope catalog

Issued in the developer portal. Empty scopes become * (any /api/ path except developer-portal). userTeamId in query or body must match the key team.

Scope	Allows
`projects.read` / `projects.write`	`/api/v2/projects*`
`purchaseorders.read` / `purchaseorders.write`	`/api/v2/purchaseorder*`
`tasks.read` / `tasks.write`	`/api/v2/task*` including activities, notes, timesheet
`employees.read`	GET `/api/v2/employees*` only
`integrations.read`	`/api/v2/integrations/center*`
`*`	Any authenticated `/api/` path except developer-portal admin

Shared envelope and errors

Success: { "payload": … }. Failure: { "error": [{ "message": "…", "code": "…" }] }.

Status	Meaning
200	Success. Entity or list is under `payload`.
401	Missing Bearer, invalid `tk_*` secret, or `FS_INTEGRATION_API_KEY_AUTH_ENABLED=false`.
403	Missing scope, team mismatch, or developer-portal path with an integration key.
404	Unknown id, or a verb/path the server does not map.
500	Unhandled server error. Client message is generic.

Token from Tracopus → Integrations → API access. Format tk_{live|test}_{suffix}_{uuid}_{tail}. This page stores credentials in sessionStorage only. Live send uses the browser — host CORS must allow this origin.