Scoped API keys
Create keys with fine-grained scopes like clients.read or ai.responses. Revoke instantly, rotate safely.
Build on the same engine that runs MyTabulon workspaces — CRM, invoices, payments, inventory, projects, cloud storage buckets, and Maximo AI — through a clean, versioned REST API with scoped keys and signed webhooks.
// automate your
# Create an invoice from anywhere
curl https://api.mytabulon.com/v1/invoices \
-H "Authorization: Bearer mtb_live_..." \
-H "Idempotency-Key: order-8412" \
-d '{
"client_id": "9c2f...",
"due_date": "2026-07-01",
"items": [{"description": "Retainer",
"quantity": 1, "unit_price": 1200}]
}'
# → 201 Created
{"object": "invoice", "invoice_number": "INV-2026-0042",
"total": 1200, "status": "draft"}Keys, scopes, logs, limits, idempotency, webhooks, and AI — the boring-but-critical parts are built in from day one.
Create keys with fine-grained scopes like clients.read or ai.responses. Revoke instantly, rotate safely.
HMAC-SHA256 signed deliveries for invoice.paid, client.created, task.completed and more — with delivery logs and test events.
Create buckets, upload, read, move, and delete objects — Google-Cloud-Storage style, synced with your MyTabulon file manager.
Send an Idempotency-Key header on writes and never double-create an invoice again. Rate limits keep things fair.
POST a prompt, get business-aware AI output grounded in your workspace — the same brain behind MyTabulon.
Every call recorded with request IDs, latency, and status — plus daily volume, error rates, and top endpoints per key.
Bearer keys. Predictable nouns. List envelopes with has_more. Errors that tell you what went wrong and include a request_id you can find in your logs.
curl https://api.mytabulon.com/v1/clients \
-H "Authorization: Bearer mtb_live_..." \
-H "Content-Type: application/json"Every delivery is HMAC-SHA256 signed, logged, and replayable from your dashboard. Verify the signature, trust the payload.
const expected = crypto
.createHmac("sha256", secret)
.update(`${timestamp}.${body}`)
.digest("hex");
if (signature === `sha256=${expected}`) {
// it's really MyTabulon
}# 1. Create a bucket
POST /v1/buckets
{ "name": "product-photos" }
# 2. Upload an object (base64 body)
POST /v1/buckets/{id}/objects
{ "file_name": "chair.png",
"content_type": "image/png",
"content_base64": "iVBORw0K..." }
# 3. Read it back, anywhere
GET /v1/objects/{id}/content
# Check your quota any time
GET /v1/storage
{ "used_percent": 42.5, "limit_label": "100 GB" }Every MyTabulon plan ships with cloud storage — from 1 GB free to 1 TB on Max. The Buckets API works the way Google Cloud Storage does: create buckets, upload objects, read, move, overwrite, and delete them programmatically.
Sign in with your MyTabulon account, pick the scopes you need, and copy your key — shown exactly once.
Hit GET /v1/clients with your Bearer key. Clean JSON, cursor-friendly pagination, predictable errors.
Subscribe to webhooks, automate invoicing, sync CRM data, and put Maximo AI inside your own product.
No card, no trial clock. Create a workspace, mint a key, and you immediately get:
Free to start on any active MyTabulon workspace. Your first API key is one login away.