Send leads in from your website or lead provider

If your website has an enquiry form, or you buy leads from a provider, they do not have to reach you as email. A key from this screen lets them put the lead straight on your list, day and night, with nobody typing.

Steps

1. 1

   Open the API key screen

   In Settings, go down to Integration Settings and tap API Key Management.

   Show me
2. 2

   Start a key

   Tap Generate New API Key.

   Show me
3. 3

   Name it after whoever will use it

   Type a name under Integration Name — your website, or the provider — and tap Create. One key per integration, so you can switch one off without touching the rest.

   Show me
4. 4

   Copy it and send it on

   Tap the copy icon on the key’s card, then send the key to whoever is building the integration. It is shown in full only on this screen, and it works like a password: anything holding it can add leads to your account.

   Show me
5. 5

   Watch it working

   The Operation Log at the bottom records what you did to your keys, and the bar at the top fills as imported leads use up the month’s allowance.

   Show me

Good to know

For your developer

Send the key and this section to whoever is doing the work. One lead per request; there is no batch endpoint.

POST https://api-ay3h7xfjfa-uc.a.run.app/v1/leads
Content-Type: application/json
X-API-Key: <the key from the app>

The smallest body the server will accept for a person. Every request needs leadType and a consent object; a person also needs firstName, email and phoneNumber, and a company needs companyName instead of those three.

{
  "leadType": "individual",
  "firstName": "Jordan",
  "lastName": "Mitchell",
  "email": "jordan.mitchell@email.com",
  "phoneNumber": "4165550148",
  "leadSourceName": "Website form",
  "consent": {
    "consentText": "I agree to receive SMS messages from the dealership.",
    "capturedAt": "2026-09-16T14:20:00Z",
    "sourceId": "website-form"
  }
}

A lead that is accepted comes back as 201, with the id it was given.

{
  "success": true,
  "id": "kR2mVq8t1cZpA7ne",
  "leadType": "individual",
  "scope": "user",
  "assignmentStatus": "skipped",
  "vin": null,
  "attachmentPaths": []
}

Anything refused comes back with success set to false, a machine-readable code and a sentence to log. A bad body also names the field that failed.

{
  "success": false,
  "code": "INVALID_REQUEST",
  "message": "Missing or invalid field: phoneNumber",
  "field": "phoneNumber"
}