> ## Documentation Index
> Fetch the complete documentation index at: https://apidocs.fohlio.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Fohlio API

> Authenticate and manage access to the Fohlio API.

Use the Fohlio API to read and write projects, items, suppliers and orders programmatically.

## What you can do with it

**Link Fohlio to your ERP.** The most common use of the API is syncing Fohlio with ERP systems like NetSuite, Microsoft Business Central, or your accounting software of choice — Fohlio's procurement documents are structured to match common ERP standards, so the sync stays straightforward.

**Connect Fohlio to your design software.** We offer a native Revit integration, but you're not limited to it — use the API to link Fohlio to other design tools like SketchUp, giving you direct access to your specs so you can use Fohlio as your library from within your design workflow.

**Power advanced reporting and dashboards.** Pull data out of Fohlio and into the reporting or BI tools you already use to build the reports and dashboards your team needs.

**Keep project management in sync.** Push updates back into Fohlio from your other tools, so information stays matched across every system you rely on.

## Authentication

Fohlio uses token-based authentication. Fetch your token with your email and password, then include it on every request as the `Authorization` header.

Tokens are scoped to your account and inherit your role. Requests without a valid token, or with a revoked token, receive a `401 Unauthorized` response.

Get your token:

```bash theme={null}
curl -X GET \
   --header 'Accept: application/json' \
   --data-urlencode 'email=YOUR_EMAIL' \
   --data-urlencode 'password=YOUR_PASSWORD' \
   --location 'https://app.fohlio.com/be/openapi/tokens/current'
```

Use it on a request:

```bash theme={null}
curl -X GET \
  --header 'Accept: application/json' \
  --header 'Authorization: YOUR_API_TOKEN' \
  --location 'https://app.fohlio.com/be/openapi/users'
```

<Warning>
  Treat your API token like a password. Don't expose it in client-side code or public repositories — call the API from your server.
</Warning>

## Authorization

Every API key carries the same role as its owner in the workspace. Requests are authorized per-endpoint against that role — a key can never do more than the user it belongs to.

| Role   | Access                                                                                       |
| ------ | -------------------------------------------------------------------------------------------- |
| Admin  | Full read/write access, including managing users, API keys, and workspace settings.          |
| Editor | Read and write access to projects, items, suppliers and orders. Cannot manage users or keys. |
| Viewer | Read-only access to projects, items, suppliers and orders.                                   |

## Rate limits

Requests are limited to **120 requests per minute** per team. Exceeding this returns a `429 Too Many Requests` response.

Need a higher limit? Limits are configurable — contact your account manager to adjust them for your team.

## API reference

<Card title="View API reference" icon="arrow-right" href="/api-reference" horizontal>
  See every endpoint, request/response schemas, and code samples in the Fohlio interactive API explorer.
</Card>