Coastline REST API

What you get

The Coastline REST API gives you programmatic access to your workspace data: contacts, opportunities, projects, invoices, estimates, and more. Use it to build custom integrations, sync data to other systems, or automate tasks that go beyond what Zapier covers.

Get an API key

1. Go to Settings → Developer → API Keys.
2. Click New key.
3. Give the key a descriptive name (e.g. "Production integration") and copy the generated token.

Keep this token private. Anyone who has it can read and write your workspace data.

Base URL

https://api.coastlinecrm.com/v1

All requests require the header:

Authorization: Bearer YOUR_API_KEY

Rate limits

100 requests per minute per API key. Responses include X-RateLimit-Remaining and X-RateLimit-Reset headers.

Webhooks

Coastline can push events to your server in real time.

1. Go to Settings → Developer → Webhooks → New webhook.
2. Enter your endpoint URL and choose the event types to receive.
3. Coastline signs each request with an HMAC-SHA256 signature in the X-Coastline-Signature header so you can verify authenticity.

Available webhook events include contact created/updated, invoice paid, opportunity stage changed, and more.

API reference

Full endpoint documentation is available in the developer docs linked from Settings → Developer → API Keys → View docs.

Things to know

• The API is read-write. Destructive operations (deletes) are permanent.
• API keys do not inherit workspace role permissions; they have full read-write access to your workspace. Scope your keys as narrowly as your use case allows.
• To revoke a key, delete it from Settings → Developer → API Keys. Requests using the deleted key will immediately receive a 401 response.