# REST API & Webhooks

> A documented REST API and webhooks on every meaningful event - included in the platform, not licensed per connection.

**URL:** https://cubemsp.co.uk/integrations/rest-api

Every integration on this page is built on the same API you get.

There is a familiar and unattractive commercial pattern in this market: the platform is sold, and then the ability to get data in or out of it is sold again, per connection, per year. We do not do that. Every integration described elsewhere on this site is built against the same documented REST API that ships with your tenant, authenticated the same way, rate-limited the same way. If we can build against it, so can you, or so can whoever you employ to.

## Details

- **Category:** Platform
- **Licence cost:** included, no per-connector charge
- **Platform:** CubeMSP (https://cubemsp.co.uk/platform)

## What syncs

- **Clients, contacts and sites** (Two-way): Read and write the client structure, so another system can create a client or keep contact details in step without a manual step.
- **Incidents and time entries** (Two-way): Raise, update, resolve and query incidents, and book time against them. This is the endpoint most integrations use.
- **Services and quantities** (Two-way): Read the recurring book and write quantity changes, which is how licence reconciliation and provisioning tools plug in.
- **Webhooks on every meaningful event** (Out of CubeMSP): Incident raised, assigned, resolved; service changed; renewal approaching; review published. Delivered with retries and a signature you can verify.

## How it behaves

- **Documented, with examples:** An OpenAPI description and worked examples, not a PDF from two versions ago. If the documentation is wrong, that is a defect and we treat it as one.
- **Scoped keys:** API keys scoped to your tenant with per-endpoint permissions, so an integration that only needs to raise incidents cannot read your margins.
- **Signed, retried webhooks:** Payloads signed so you can verify they came from us, and retried with backoff so a brief outage at your end does not lose an event.
- **Not licensed per connection:** No per-connector charge and no integration tier. Charging separately for access to your own data is a business model we have chosen not to have.

## Setup

1. Create a scoped API key in your tenant and grant it only the endpoints it needs.
2. Register webhook endpoints and verify the signature on the test event.
3. Build against the sandbox tenant before pointing anything at live data.

## Frequently asked questions

**Is the API included?**

Yes, in every tenant, at no additional charge and with no per-connection licence. This is a deliberate commercial position rather than an oversight we will correct later.

**Is there a sandbox?**

Yes - a separate tenant with representative data, so integrations are built and tested without touching live client records.

**How is it versioned?**

Versioned endpoints with a deprecation policy. Breaking changes are announced with notice and the previous version keeps working through the transition.

**What are the rate limits?**

Generous enough that normal integration work never encounters them, and published rather than discovered. If you have a legitimate bulk requirement, tell us and we will raise them rather than making you work around them.

**Can we export everything?**

Yes, in full, at any time, in open formats. There is no commercial advantage in holding a customer’s data hostage and we do not design as though there is.

## Related integrations

- **Microsoft 365** - Single sign-on through Entra ID, licence counts reconciled per client, and incidents raised from mail without leaving the tenant you already manage. https://cubemsp.co.uk/integrations/microsoft-365
- **RMM Platforms** - Alerts from your RMM raise incidents against the right client, site and device - and close again when the alert clears. https://cubemsp.co.uk/integrations/rmm-platforms
- **Xero** - Recurring service billing and chargeable time pushed to Xero as draft invoices, with the ledger staying exactly where your accountant wants it. https://cubemsp.co.uk/integrations/xero

## Contact

- **Product:** CubeMSP
- **Trading name of:** Cube Systems Limited (company number 17220899, ICO registration number ZC216972)
- **Email:** hello@cubemsp.co.uk
- **Sales:** sales@cubemsp.co.uk
- **Support:** support@cubemsp.co.uk
- **Telephone:** 01234 672 617 (+441234672617)
- **Address:** Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP
- **Opening hours:** Monday to Friday, 9am to 5.30pm
- **Part of:** Crushed Ice Group (https://crushedicegroup.co.uk)