API Read the full documentation →

Build on the Appz360 API

A REST API for the apps in your Microsoft 365 tenant. Manage apps and users, and react to workspace events with signed webhooks.

View API documentation → Quickstart

REST · JSON · OAuth 2.0 · Webhooks · Version v1

At a glance

The API in one table

Everything you need to know before you write the first request.

StyleREST, JSON requests and responses
Base URLhttps://api.appz360.com/v1
Versionv1
AuthenticationOAuth 2.0 client-credentials, bearer token scoped to your workspace
TransportHTTPS only; plain HTTP is rejected
Rate limit120 requests per minute per API key, with X-RateLimit headers
Paginationlimit and cursor query parameters
Core resources

What you can do with the API

Three resource groups cover day-to-day integration work.

Apps

Manage the Appz360 apps installed in your Microsoft 365 tenant.

  • GET /apps
  • GET /apps/{app_id}
  • PATCH /apps/{app_id}/settings

Users

Work with users provisioned in your workspace and synced from Microsoft 365 through Microsoft Graph.

  • GET /users
  • POST /users/{user_id}/roles
  • DELETE /users/{user_id}

Webhooks

Subscribe to workspace events such as app installs, user changes and workflow completions.

  • POST /webhooks
  • Events: app.installed, user.deprovisioned
  • Payloads signed with X-Appz360-Signature
Quickstart

Your first request in three steps

  1. 1Create an API key in the admin console under Settings, Developers, API Keys.
  2. 2Exchange it for a token using the OAuth 2.0 client-credentials flow.
  3. 3Call the API with the bearer token, for example to list your installed apps.
Authentication guide →
# 1. Get an access token curl https://api.appz360.com/v1/oauth/token \ -X POST \ -H "Content-Type: application/json" \ -d '{"client_id":"YOUR_CLIENT_ID", "client_secret":"YOUR_CLIENT_SECRET", "grant_type":"client_credentials"}' # 2. List installed apps curl https://api.appz360.com/v1/apps \ -H "Authorization: Bearer <access_token>"
Use cases

Common ways teams integrate

Connect Appz360 apps to the systems your teams already use.

Security

Built for the Microsoft 365 tenant

Encrypted in transit

Every request must use HTTPS. Requests over plain HTTP are rejected.

Workspace-scoped tokens

OAuth 2.0 client-credentials tokens are scoped to your workspace and are short-lived.

Signed webhooks

Each webhook payload carries an X-Appz360-Signature header, signed with your webhook signing secret.

Built for Microsoft 365

Users sync from Microsoft 365 through Microsoft Graph, and app details include their Graph permission scopes.

FAQ

API questions, answered

What is the Appz360 API?

It is a REST API with JSON requests and responses that lets you manage Appz360 apps, users and webhooks in your Microsoft 365 workspace programmatically.

How do I authenticate with the Appz360 API?

Create an API key in the Appz360 admin console under Settings, Developers, API Keys. Exchange your client ID and secret for a short-lived OAuth 2.0 bearer token, then send it in the Authorization header.

What is the base URL and current version?

The base URL is https://api.appz360.com/v1 and the current version is v1.

What are the API rate limits?

Requests are limited to 120 per minute per API key. Each response includes X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset headers, and exceeding the limit returns a 429 response.

Does Appz360 support webhooks?

Yes. Register an endpoint with POST /webhooks and choose events such as app.installed and user.deprovisioned. Each payload is signed with the X-Appz360-Signature header.

Are there official SDKs?

Client libraries for Node.js and Python are planned. Until then you can call the API over HTTPS from any language using the examples in the documentation.

Where can I get help with an integration?

Read the full API documentation at appz360.com/docs, or email developers@appz360.com.

Ready to integrate?

Read the full reference, or talk to our team about your use case.

Open the documentation →Email developers