Authentication
All API requests must include your API key as a Bearer token in the Authorization header.
Get your API key
- Log in to your CRM at
app.pushbuttoncrm.com - Go to Settings → Developer
- Click Generate API key
- Copy and store the key — it is only shown once
Request format
Include the key in every request as a Bearer token:
Authorization: Bearer YOUR_API_KEYFull example with cURL:
curl https://app.pushbuttoncrm.com/api/v1/contacts \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json"Tenant scoping
API keys are scoped to a single CRM tenant. All data returned is automatically filtered to your company. You cannot access data from another tenant regardless of which API key is used.
Error responses
| Status | Meaning |
|---|---|
| 401 | Missing or invalid API key |
| 403 | Valid key but insufficient role permissions |
| 429 | Rate limit exceeded — retry after 60 seconds |
Roles
| Role | Permissions |
|---|---|
| owner | Full read/write access to all resources |
| admin | Read/write contacts, deals, companies — cannot manage users |
| member | Read-only access to contacts and deals |