Integrations API
Read your finance, fleet, HR, support and document data from your own systems, create invoices, and get a signed webhook when something changes.
What you can do
| Area | Read | Write | Webhook events |
|---|---|---|---|
| Finance | Invoices, payments, bills, purchase orders | Create and update draft invoices, void issued invoices | Invoices, payments, bills, purchase orders, e-invoicing, DATEV exports |
| Fleet | Vehicles, work orders, fuel logs | — | Vehicles, work orders, fuel logs, tachograph, dashcam |
| HR | Employees, leave requests, timesheets | — | Employees, leave, timesheets |
| Support | Tickets | — | Tickets |
| Files | Document metadata | — | Uploads, deletions, shares, e-signatures |
| Webhooks | Endpoints and deliveries | Create, update, pause, resume, delete endpoints; rotate secrets; replay deliveries | — |
There are also events for messaging and for compliance programmes — see the
event catalogue, which also marks the few event types
OfficeHero does not send yet. A webhook shows a key no more than its reads
could: each event family needs the matching read scope, and the families
without a read endpoint (compliance, e-invoicing, DATEV, tachograph, dashcam,
e-signature) need int:*, which the apps do not offer — see
Webhooks.
An invoice created through the API is a draft: it gets its number, and can be voided, once it is issued in the Finance app. The API cannot void or delete a draft — discard it in the Finance app.
How it works
- One base URL:
https://api.officehero.io. Every path starts with/v1/. - One API key per integration. A key belongs to one OfficeHero company and grants only the scopes you picked. There is no tenant header: the key decides the company.
- JSON in, JSON out. Errors are RFC 9457 problem documents.
- Lists are cursor-paginated, newest first. See Pagination.
- Writes can be retried safely with an
Idempotency-Key. See Idempotency. - Versions are dates. Pin one with
OH-Version. See Versioning. - Webhooks are signed with HMAC-SHA256. See Webhooks.
Start here
- Quickstart — create a key and make a call.
- Authentication and Scopes.
- The API reference — every endpoint, field and error, with “Try it”.
Status
The REST API (OH-Version: 2026-05-16) is generally available, and so are
integration webhooks: OfficeHero has delivered them since
2026-10-12. If delivery is ever paused, a notice at the top of this page and
of the Webhooks pages says so. The MCP server for AI agents and
OAuth apps are separate, with their own credentials and status.
What changed and when is in the changelog.