# ReviewTrackers

> ReviewTrackers is an online reputation management platform that monitors customer reviews across 100+ review sites, generates and responds to reviews, and delivers sentiment and experience analytics for multi-location brands. It exposes a production REST API at https://api.reviewtrackers.com using HTTP Basic authentication and HAL+JSON hypermedia responses. API access is a paid plan entitlement and credentials are issued by a customer success representative — the developer reference at https://developer.reviewtrackers.com/ is credential-gated (HTTP 401, Basic realm "Restricted Area"), so no machine-readable specification is publicly available. This file was generated by API Evangelist from probed evidence, not published by ReviewTrackers.

## API

- [ReviewTrackers API](https://api.reviewtrackers.com/): Production REST API. HAL+JSON, media-type versioned at v2 (application/vnd.rtx.<resource>.v2.hal+json). Every data resource is scoped to an account via a required account_id query parameter.
- [API overview](https://www.reviewtrackers.com/blog/api-integrations/): The only public write-up of what the API is for — downloading review data, syncing with CRM and POS systems, automating responses.
- [Developer reference](https://developer.reviewtrackers.com/): GATED. Returns HTTP 401 with WWW-Authenticate Basic realm="Restricted Area" to anonymous clients.

## Confirmed resources

Confirmed by live probe — a routed path answers 400 or 401, an unrouted path answers 404 "Endpoint Not Found".

- `POST /auth`: Credential exchange. Accepts application/json and the vendored application/vnd.rtx.auth.v2.hal+json family.
- `GET /accounts`: Customer organizations.
- `GET /locations`: Business locations — the unit ReviewTrackers bills on and reviews attach to.
- `GET /reviews?account_id=`: Reviews harvested from monitored review sites.
- `GET /responses`: Published replies to reviews.
- `GET /users`: Platform users within an account.
- `GET /sources`: Monitored review sites and data sources.
- `GET /campaigns`: Review solicitation and feedback-request campaigns.
- `GET /tags?account_id=`: Labels applied to reviews.
- `GET /alerts`: Notification rules on review activity.
- `GET /webhooks?account_id=`: Outbound HTTP callback subscriptions.

## Authentication

- HTTP Basic on every protected resource — `WWW-Authenticate: Basic realm="rtx:production"`.
- No OAuth 2.0, no OpenID Connect, no API-key header. No /.well-known/ discovery document is served on any host.
- Credentials are not self-service. The API root returns: `{"message":"Contact your CS representative or reference https://developer.reviewtrackers.com/"}`

## Errors

Flat JSON envelope, NOT RFC 9457 problem+json:

- `{"error":"Must Be Authenticated.","status":401}` — missing or invalid credentials.
- `{"status":400,"error":"Missing Required Param: account_id"}` — account scope omitted.
- `{"status":404,"error":"Endpoint Not Found"}` — unknown path.
- HTTP 415 on `POST /auth` when Content-Type is absent or unsupported; the body enumerates every accepted media type.

## Artifacts

- [Authentication profile](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/authentication/reviewtrackers-authentication.yml)
- [API conventions](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/conventions/reviewtrackers-conventions.yml)
- [Error catalog](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/errors/reviewtrackers-problem-types.yml)
- [Data model](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/data-model/reviewtrackers-data-model.yml)
- [Webhook surface](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/asyncapi/reviewtrackers-webhooks.yml)
- [Lifecycle](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/lifecycle/reviewtrackers-lifecycle.yml)
- [Rate limits](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/rate-limits/reviewtrackers-rate-limits.yml)
- [Plans and pricing](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/plans/reviewtrackers-plans-pricing.yml)
- [Standards conformance](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/conformance/reviewtrackers-conformance.yml)
- [Vulnerability disclosure](https://raw.githubusercontent.com/api-evangelist/reviewtrackers/refs/heads/main/security/reviewtrackers-vulnerability-disclosure.yml)

## Docs

- [Product site](https://www.reviewtrackers.com)
- [Plans](https://www.reviewtrackers.com/plans/)
- [Help center](https://support.reviewtrackers.com/hc/en-us)
- [Status page](https://status.reviewtrackers.com)
- [Security](https://www.reviewtrackers.com/terms-service/security/)
- [Bug bounty policy](https://www.reviewtrackers.com/bug-bounty/) — reports to security@reviewtrackers.com
- [Terms of service](https://www.reviewtrackers.com/terms-service/)
- [Privacy policy](https://www.reviewtrackers.com/terms-service/privacy-policy/)
- [Product updates](https://www.reviewtrackers.com/blog/solutions/product-updates/)

## Not available

- No OpenAPI, Swagger, GraphQL or AsyncAPI specification is published on any ReviewTrackers host.
- No SDK exists in npm, PyPI, RubyGems, Packagist or crates.io, and the company GitHub organization ships no API client.
- No MCP server and no A2A agent card.
- No /.well-known/ document, including no security.txt.