API Endpoints and Permissions

API Documentation – Endpoints

Available endpoints

The Abomate REST API provides CRUD endpoints for all important resources:

Contracts (Licenses)

Method Endpoint Description
GET/v1/licensesList all contracts (pagination, filters)
GET/v1/licenses/{id}Get single contract
POST/v1/licensesCreate new contract
PUT/v1/licenses/{id}Update contract
DELETE/v1/licenses/{id}Delete contract

Other endpoints

Resource Endpoints
CategoriesGET/POST/PUT/DELETE /v1/categories
DepartmentsGET/POST /v1/departments
ContactsGET/POST /v1/contacts
UsersGET /v1/users (read-only)
StatisticsGET /v1/stats

Permissions (Scopes)

When creating an API token, you select granular permissions:

Scope Description
licenses:readRead contracts
licenses:writeCreate and edit contracts
licenses:deleteDelete contracts
categories:read / writeRead / write categories
departments:read / writeRead / write departments
contacts:read / writeRead / write contacts
users:readRead users (no write access)
stats:readRead statistics
credentials:writeWrite credentials (passwords, keys)

Rate limiting

Default: 60 requests per minute per token. The limit can be customized per token.

When exceeded you receive HTTP status 429 Too Many Requests with a Retry-After header.

Response format

All responses in JSON format with English field names. Example:

{
  "data": {
    "id": 1,
    "name": "Microsoft 365",
    "provider": "Microsoft",
    "status": "active",
    "cost": 12.50,
    "billing_cycle": "monthly"
  }
}
Tip: The full interactive API documentation is available under Settings → API → API Docs – there you can try out all endpoints directly.