Integrations & API
Connect Stackroom to the rest of your stack
A documented REST API, API keys and event webhooks let you sync assets, automate workflows and plug Stackroom into the tools you already run.
How do you integrate with Stackroom?
Stackroom exposes a documented REST API with scoped API keys and 41 signed webhook events — checkouts, returns, warranty expiry, audits and more — delivered with retries and a delivery log. CSV import and CSV or XLSX export cover migration and finance work without writing any code.
Build & connect
Open by design
REST API
Read and write assets, people and more programmatically.
API keys
Scoped keys for secure server-to-server access.
Webhooks
41 signed events — checkouts, returns, warranty expiry, audits — delivered with retries and a log.
Import & export
CSV import for assets and people; CSV and XLSX export for finance, audits and migrations.
Full reference, quickstart and the OpenAPI specification are on the developers page. More connectors (Slack/Teams, QuickBooks/Xero, Zapier) are on the roadmap.
Scoped keys, issued from the console
Keys are created per integration rather than per person, so revoking one does not break the others, and each carries its own scope.
Rate limits and the monthly quota are set by your plan and reported on every response, so a client can back off before it is throttled rather than after.
Authenticate programmatic requests. Test with GET /api/v1/ping using Authorization: Bearer <key>.
Limits are per key and set by your plan — see Billing for your tier’s numbers. Every response carries your current position, so a well-behaved client never needs to hit a 429 to discover it.
| X-RateLimit-Limit | Requests allowed per minute on your plan. |
| X-RateLimit-Remaining | Requests left in the current minute. |
| X-RateLimit-Reset | Unix seconds at which the minute window resets. |
| X-Quota-Limit | Requests allowed this calendar month (UTC), or “unlimited”. |
| X-Quota-Used | Requests consumed this month across this key. |
| X-Quota-Remaining | Requests left this month. Absent when unlimited. |
Scopes: read keys can call GET routes;write keys can also create/update. Rate limits apply per key.
41 events, signed and retried
Checkouts, returns, warranty expiry, audits, people, members, bookings, reminders and plan changes all fire events. Each delivery is signed with HMAC-SHA256 over the timestamp and the raw body, so a receiver can verify it and reject a replay.
Delivery is at-least-once with retries and a backoff. Every delivery carries a unique id — deduplicate on it and the guarantee is safe to rely on.
We POST a signed JSON payload (X-Stackroom-Signature: sha256=…) to your URL on subscribed events. Reveal an endpoint’s signing secret below to verify deliveries.
| ok | assignment.checked_out | 200 | 24 Sep 2026, 10:41 |
| ok | asset.scanned | 200 | 24 Sep 2026, 10:26 |
| ok | request.approved | 200 | 24 Sep 2026, 10:12 |
| ok | warranty.expiring | 200 · 2 tries | 24 Sep 2026, 10:04 |
| fail | reminder.due | 504 · 3 tries | 24 Sep 2026, 10:01 |
| fail | audit.completed | 502 · 3 tries | 24 Sep 2026, 09:59 |
| ok | assignment.checked_in | 200 | 23 Sep 2026, 18:14 |
| ok | booking.confirmed | 201 | 23 Sep 2026, 16:40 |
| ok | employee.offboarded | 200 | 23 Sep 2026, 11:05 |
FAQ
Questions about the API
Where is the Stackroom API documentation?
The reference and the OpenAPI (Swagger) specification are published at api.stackroom.io/api/v1/docs, with a quickstart on the developers page. You do not need an account to read either.
How are Stackroom webhooks secured?
Each delivery is signed with HMAC-SHA256 over the timestamp and the raw request body, so a receiver can verify authenticity and reject replayed requests. Every delivery also carries a unique id, which is what makes at-least-once delivery safe to deduplicate.
What happens if our endpoint is down?
Deliveries are retried with a backoff rather than dropped, and every attempt is recorded in a delivery log you can inspect, so a brief outage does not silently lose events.
Does Stackroom integrate with Slack, Zapier or accounting tools?
Not as prebuilt connectors today — those are on the roadmap. The API and webhooks cover the same ground in the meantime, and CSV or XLSX export handles finance and audit hand-offs.
Ready to know where every asset is?
Start free — tag your first 100 assets and run a real checkout in your first session. No credit card required.