Fohlio API - Fohlio API

Use the Fohlio API to read and write projects, items, suppliers and orders programmatically.

What you can do with it

Link Fohlio to your ERP. The most common use of the API is syncing Fohlio with ERP systems like NetSuite, Microsoft Business Central, or your accounting software of choice — Fohlio’s procurement documents are structured to match common ERP standards, so the sync stays straightforward. Connect Fohlio to your design software. We offer a native Revit integration, but you’re not limited to it — use the API to link Fohlio to other design tools like SketchUp, giving you direct access to your specs so you can use Fohlio as your library from within your design workflow. Power advanced reporting and dashboards. Pull data out of Fohlio and into the reporting or BI tools you already use to build the reports and dashboards your team needs. Keep project management in sync. Push updates back into Fohlio from your other tools, so information stays matched across every system you rely on.

Authentication

Fohlio uses token-based authentication. Fetch your token with your email and password, then include it on every request as the Authorization header. Tokens are scoped to your account and inherit your role. Requests without a valid token, or with a revoked token, receive a 401 Unauthorized response. Get your token:

curl -X GET \
   --header 'Accept: application/json' \
   --data-urlencode 'email=YOUR_EMAIL' \
   --data-urlencode 'password=YOUR_PASSWORD' \
   --location 'https://app.fohlio.com/be/openapi/tokens/current'

Use it on a request:

curl -X GET \
  --header 'Accept: application/json' \
  --header 'Authorization: YOUR_API_TOKEN' \
  --location 'https://app.fohlio.com/be/openapi/users'

Treat your API token like a password. Don’t expose it in client-side code or public repositories — call the API from your server.

Authorization

Every API key carries the same role as its owner in the workspace. Requests are authorized per-endpoint against that role — a key can never do more than the user it belongs to.

Role	Access
Admin	Full read/write access, including managing users, API keys, and workspace settings.
Editor	Read and write access to projects, items, suppliers and orders. Cannot manage users or keys.
Viewer	Read-only access to projects, items, suppliers and orders.

Rate limits

Requests are limited to 120 requests per minute per team. Exceeding this returns a 429 Too Many Requests response. Need a higher limit? Limits are configurable — contact your account manager to adjust them for your team.

API reference

View API reference

See every endpoint, request/response schemas, and code samples in the Fohlio interactive API explorer.

​What you can do with it

​Authentication

​Authorization

​Rate limits

​API reference

View API reference

What you can do with it

Authentication

Authorization

Rate limits

API reference