Authentication
Tracksales API v1 uses organization-scoped API keys. Create keys in Settings → Developer API inside your Tracksales account.
API key format
- Live:
ts_live_+ 40 characters - Test:
ts_test_+ 40 characters
Send the key on every request:
Authorization: Bearer ts_live_xxxxxxxxOr:
X-API-Key: ts_live_xxxxxxxxOrganization context
Do not send organization_id in v1 requests. The organization is inferred from the API key server-side.
Scopes
Each key has scopes such as customers:read, invoices:create, invoices:update, or * for full access. Missing scope returns HTTP 403.
Rate limits
120 requests per minute per API key (HTTP 429 when exceeded).
Base URL
All v1 endpoints live on the api subdomain: