API overview

Authenticate with organization tokens, scopes, and rate limits.

The Elio public API (v1) gives your organization programmatic access to agents, workflows, quotes, and contacts.

Base URL

https://app.iamelio.ai/api/v1

Authentication

Every request must carry an organization API token, created by a workspace admin under Org Admin → API Keys:

Authorization: Bearer bpk_live_<your-token>

Tokens are scoped to the organization that created them and bound to a set of permissions. They are shown once at creation time — store them in a secrets manager.

Scopes

A token created without explicit scopes gets the read scopes by default. Explicit scopes are recommended for production.

Rate limits

Each token has its own quota, independent from any user’s dashboard usage. Default: 120 requests per minute sustained. Throttled responses include Retry-After (seconds) and standard RateLimit-* headers — honor them with exponential backoff.

Audit trail

Every successful API call is recorded in your organization’s audit log with the originating token, so you can always trace production traffic.