REST API Overview

Authentication

The API uses API keys. Generate one in Settings → API Keys. Pass it in the Authorization header:

Authorization: Bearer oos_xxxx

Base URL

All API calls go to:

https://api.oriswork.com/api

Core endpoints

The API covers all major entities:

• GET/POST /contacts — list and create contacts
• GET/PATCH/DELETE /contacts/:id — read, update, delete
• GET/POST /companies — list and create companies
• GET/POST /deals — pipeline deals
• GET/POST /invoices — invoice CRUD
• GET/POST /activities — log and query activities
• GET/POST /tasks — task management
• POST /contacts/:id/tags — tag a contact

Webhooks

Subscribe to events in Settings → Webhooks. Oris Work will POST a JSON payload to your endpoint whenever a record is created, updated, or deleted. Available events: contact.created, deal.stage_changed, invoice.paid, engagement.approved, and 20+ more.

Rate limits

Growth plan: 100 requests/minute. Enterprise: 1000 requests/minute. Rate limit headers are included in every response: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset.

Full API reference

See the full endpoint reference with request/response schemas on the Developers page.