Skip to content
Affiliatetrackingo

API & Automation

Connect your affiliate program to everything else

REST API, signed webhooks, Zapier, Make and Segment.

EVENTcommission.created{ "amount": 980, "affiliate": "jane", "currency": "usd" }outbox · same transaction as the changeoutboxSSlackNew commission · $9.80DDiscord#partners · postedYYour webhookPOST · signed HMAC503 · retry in 30s200 OK · after retryZZapierZap triggeredGGoogle SheetsRow appendedretry with backoffHeaderAffiliatetrackingo-Signature:t=1760360400,v1=5f2b…c91eREST APIGET /v1/commissions1,200 req/min · OpenAPI 3.1
An event such as a new commission leaves the platform through a transactional outbox and fans out as signed deliveries to Slack, a webhook endpoint, Zapier and Google Sheets, with a retry on a failed delivery.

An event such as a new commission leaves the platform through a transactional outbox and fans out as signed deliveries to Slack, a webhook endpoint, Zapier and Google Sheets, with a retry on a failed delivery.

01 /Overview

Connect your program to everything else.

Every action in the dashboard is available through a REST API documented with OpenAPI 3.1. Events go out as signed webhooks and to Slack, Discord, Google Sheets, Segment and HubSpot, and the Zapier, Make and Albato apps cover the rest without code.

02 /How it works

How api & automation works, step by step.

  1. 1

    Event happens

    Written to an outbox in the same transaction as the change, so nothing is lost.

  2. 2

    Delivered

    To email, Slack, Discord, Google Sheets, Segment, HubSpot or your signed webhook endpoint.

  3. 3

    Retried

    Failures retry with backoff; Segment message ids are event ids, so retries never double-count.

03 /In depth

Everything you need to know about api & automation.

A complete REST API

Secret keys work on the whole API as an admin, at 1,200 requests per minute per key, with OpenAPI 3.1 at /openapi.json and rendered docs.

Webhooks you can trust

Deliveries are signed with an HMAC header including a timestamp. In production, endpoints must be https and can't point at private or loopback addresses, checked at connect time so DNS rebinding doesn't get around it.

No-code automation

Zapier triggers for every event plus Create Affiliate, Record Sale, Record Refund and Find Affiliate actions. Make and Albato apps with dedicated webhooks.

Data in and out

Segment incoming links users and records orders and refunds; Segment outgoing identifies affiliates and tracks events. HubSpot gets affiliates and referred customers as contacts.

04 /FAQ

Questions about api & automation.

Is there a rate limit on the API?

1,200 requests per minute per secret key.

How do I verify a webhook came from you?

Each delivery carries a signature header with a timestamp and an HMAC of the payload, signed with your endpoint's secret.

05 /Related

Works even better together.

Ready to grow through partners?

Connect your billing, add one script tag and invite your first partners. Import affiliates, codes and history from Rewardful, FirstPromoter, Tolt or a CSV.