Most Mokapen API endpoints are scoped to a single organization. The organization context is defined both in the URL and in the access token.
Entity endpoints follow this pattern:
GET /api/v1/{org_id}/contacts
GET /api/v1/{org_id}/tasks
POST /api/v1/{org_id}/store_contact
{org_id} with the numeric organization ID. Some integrations may use an encrypted organization identifier; the API accepts both formats where supported.Access tokens issued for developer applications include an organization_id (stored in the token record and available in the OAuth token response).
When you call an endpoint with {org_id} in the URL, Mokapen verifies that the token is authorized for that organization. If the URL organization does not match the token organization, the API returns 403 Forbidden.
To retrieve organizations accessible to the authenticated user or integration:
GET /api/v1/organizations
Ai nevoie de ajutor?