SuprSync External API
The SuprSync External API provides scoped access to supported workforce resources. Access is limited by each credential's scopes; it is not a general-purpose or full-access API.
Base URL
${SUPRSYNC_API_BASE}/external/v1
Quick Start
- Get API credentials - Sign in on the Dashboard to create API keys, or contact your SuprSync admin.
- Authenticate - Include your
x-api-keyandx-api-secretheaders in every request. - Make requests - Call any endpoint to retrieve your workforce data.
Example Request
curl -X GET "${SUPRSYNC_API_BASE}/external/v1/locations" \
-H "x-api-key: api_your_client_id" \
-H "x-api-secret: sec_your_client_secret"
Example Response
[
{
"id": "a1b2c3d4-...",
"name": "Downtown Office",
"city": "Lagos",
"state": "Lagos",
"latitude": 6.5244,
"longitude": 3.3792,
"hexcode": "#00AD57",
"symbol": "DO",
"locationDetectionEnabled": true
}
]
Available Endpoints
| Method | Endpoint | Description |
|---|---|---|
| GET | /hours | Hours worked per day over a date range |
| GET | /overtime | Approved overtime by employee |
| GET | /schedules | Shift schedules with filtering |
| GET | /shifts | Shift slots/templates, or a single shift by ID |
| POST | /shifts/slots | Create a shift slot |
| POST | /shifts/book | Book staff into a shift slot |
| DELETE | /shifts/:id | Cancel a shift |
| GET | /locations | Company branches/locations |
| POST | /locations | Create a new location |
| PATCH | /locations/:id | Update a location |
| GET | /job-roles | Job roles |
| POST | /job-roles | Create a job role |
| PATCH | /job-roles/:id | Update a job role |
| DELETE | /job-roles/:id | Delete a job role |
| GET | /staff | Staff/team member list |
| GET | /workforce/resources | Versioned workforce supply resources and tombstones |
| POST | /staff/bulk | Bulk create staff members |
| DELETE | /staff/:id | Deactivate a staff member |
| POST | /auth/signin | Sign in (returns JWT) |
| GET | /auth/keys | List API keys (JWT auth) |
| POST | /auth/keys | Create API key (JWT auth) |
Your SuprSync onboarding contact supplies the API origin. Set it as SUPRSYNC_API_BASE; do not assume a public api.suprsync.com host.
Next Steps
- Authentication - Learn how API key authentication works
- Rate Limiting - Understand request limits
- Error Handling - Handle errors gracefully