Base URL
X-API-Key
header; there is no tenant header, because the key itself identifies the tenant.
There is no separate sandbox environment. Debug your integration against your own
tenant — create a few test employees and draft documents for that purpose.
Enabling it for a tenant
The Developer API sits behind a feature flag. While the flag is off, every request returns403 with the code FEATURE_FLAG.NOT_AVAILABLE, even with a valid key. Ask
your Doodocs manager to enable it.
The key management screen appears in the same place: Settings → Integrations →
“For developers” → API.
Verifying a key
Before building an integration, confirm the key is accepted. The endpoint returns nothing but a status and requires no scope.Environment limits
- Rate: 10 requests per second per key, bursting to 20. See Limits.
- There is a single version,
v1. Compatibility rules live in Conventions. - Outbound calls (webhooks) go only to
httpsand only to public addresses — see Security.