Integration
Connect IndexBox data to your BI stack
Use a bearer token to pull tenders, opportunities, and export-ready CSVs without browser sessions.
LiveScale and Command
API Access
Read-only API for tenders and Autopilot opportunities.
Tenders, opportunities, and CSV export endpoints
Token creation and revoke controls in Workspace
How it works
What happens behind the scenes once you enable the integration.
- 1Create an API token in Workspace -> Integrations.
- 2Attach the token as a Bearer header for every request.
- 3Query tenders or opportunities and page results with limit/offset.
- 4Use CSV export for CRM import or data warehouse loads.
Setup checklist
Steps your admin takes to get the integration live.
- Open Workspace -> Integrations -> API tokens.
- Create a token and store it securely (shown once).
- Send requests to the API base URL using Bearer auth.
- Rotate or revoke tokens when needed.
Technical reference
Endpoints and sample requests to hand to your engineering team.
Endpoints
- GET /integrations/api/ping
- GET /integrations/api/tenders
- GET /integrations/api/tenders/{tender_id}
- GET /integrations/api/opportunities
- GET /integrations/api/opportunities/export.csv
Sample request
curl -H "Authorization: Bearer <token>" \ "https://api.tenders.indexbox.io/integrations/api/tenders?limit=25&offset=0"
Notes
- All responses are scoped to your org and read-only.
- Use limit/offset for pagination.
- CSV export supports stage and updated_since filters.
FAQ
Quick answers to common integration questions.
What data can I access with the API?
You can read tenders, Autopilot opportunities, and export CSVs. All responses are scoped to your organization.
How do I rotate an API token?
Create a new token in Workspace and revoke the old one. Tokens are shown only once after creation.
Can I schedule regular exports?
Yes. Use the CSV export endpoints on a schedule and import into your BI or CRM tooling.
Security & compliance
Controls that keep data safe and auditable.
- Tokens are stored as hashes and shown only once.
- Revoke tokens instantly to cut access.
- Audit fields track created and last-used timestamps.