# Salesflare

> Salesflare is an intelligent CRM for B2B startups and small businesses that
> automates data entry by pulling contact and company data out of email,
> calendars, phone logs and social profiles. It exposes a public REST API over
> the whole CRM object model and a first-party hosted MCP server for AI agents.
>
> Generated by API Evangelist (apievangelist.com) on 2026-08-13 from Salesflare's
> own published contract and live discovery documents. Salesflare serves no
> llms.txt of its own — https://salesflare.com/llms.txt and
> https://api.salesflare.com/llms.txt both return 404.

## At a glance

- API base URL: https://api.salesflare.com
- Machine-readable contract: https://api.salesflare.com/openapi.json (Swagger 2.0, 46 paths, 71 operations)
- Auth (REST): `Authorization: Bearer {APIKEY}` — account-level key, unscoped, made in the app under Settings > API keys
- Auth (MCP): OAuth 2.1 / OIDC, issuer https://api.salesflare.com/oidc, dynamic client registration, PKCE S256
- MCP server (remote, hosted, first-party): https://mcp.salesflare.com/mcp
- No GraphQL, no gRPC, no webhooks, no AsyncAPI, no A2A agent card
- No first-party client SDK in any language

## APIs

- [Salesflare API docs](https://api.salesflare.com/docs): interactive reference for the full REST surface
- [Salesflare OpenAPI](https://api.salesflare.com/openapi.json): Swagger 2.0, self-published at the API host root
- [Accounts](https://api.salesflare.com/docs): companies — list, get, create, update, delete, plus feed, messages, contacts and users sub-resources
- [Contacts](https://api.salesflare.com/docs): people attached to accounts
- [Opportunities](https://api.salesflare.com/docs): deals, positioned on pipeline stages
- [Tasks](https://api.salesflare.com/docs): to-dos
- [Pipelines and stages](https://api.salesflare.com/docs): the sales process model
- [Workflows](https://api.salesflare.com/docs): email campaigns and automations with audience filters
- [Custom fields](https://api.salesflare.com/docs): per-tenant schema, discoverable at runtime
- [Filter fields](https://api.salesflare.com/docs): the registry of filterable fields per entity
- [Tags, groups, users, currencies, meetings, calls, internal notes, email data sources, AI settings](https://api.salesflare.com/docs)

## Agent surfaces

- [Salesflare MCP server](https://mcp.salesflare.com/mcp): remote Streamable HTTP MCP endpoint, OAuth-gated, included in all plans
- [MCP integration listing](https://integrations.salesflare.com/listings/model-context-protocol): what the server can do, in Salesflare's own words
- [MCP setup guide](https://howto.salesflare.com/en/articles/14432597-how-can-i-use-salesflare-with-chatgpt-or-claude): connecting ChatGPT or Claude
- [OAuth authorization server metadata](https://api.salesflare.com/.well-known/oauth-authorization-server): RFC 8414
- [OAuth protected resource metadata](https://mcp.salesflare.com/.well-known/oauth-protected-resource): RFC 9728

## Specs and artifacts (API Evangelist)

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/apis.yml): the APIs.json index for Salesflare
- [Harvested OpenAPI](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/openapi/_original/salesflare-openapi.json): verbatim copy of the live Swagger 2.0
- [Authentication profile](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/authentication/salesflare-authentication.yml)
- [OAuth scopes](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/scopes/salesflare-scopes.yml)
- [API conventions](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/conventions/salesflare-conventions.yml): pagination, filtering, sorting, custom fields, versioning
- [Error catalog](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/errors/salesflare-problem-types.yml)
- [Data model](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/data-model/salesflare-data-model.yml): 17 entities, 22 relationships
- [MCP manifest](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/mcp/salesflare-mcp.yml)
- [MCP-to-REST tool crosswalk](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/mcp/salesflare-tool-crosswalk.yml)
- [Agent skills](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/skills/_index.yml): five packaged flows grounded in real operationIds
- [Lifecycle](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/lifecycle/salesflare-lifecycle.yml)
- [Conformance](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/conformance/salesflare-conformance.yml)
- [Packages](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/packages/salesflare-packages.yml)
- [Plans and pricing](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/plans/salesflare-plans-pricing.yml)
- [Rate limits](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/rate-limits/salesflare-rate-limits.yml)
- [Domain security](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/security/salesflare-domain-security.yml)
- [Well-known probe](https://raw.githubusercontent.com/api-evangelist/salesflare/refs/heads/main/well-known/salesflare-well-known.yml)

## Docs and support

- [Salesflare](https://salesflare.com)
- [Help center](https://howto.salesflare.com)
- [Where can I find API documentation for Salesflare?](https://howto.salesflare.com/en/articles/8010911-where-can-i-find-api-documentation-for-salesflare)
- [Do you have an API?](https://howto.salesflare.com/en/articles/1017460-do-you-have-an-api)
- [Integrations directory](https://integrations.salesflare.com)
- [Blog](https://blog.salesflare.com)
- [Status page](https://status.salesflare.com)
- [Pricing](https://salesflare.com/pricing)
- [Terms of Use](https://salesflare.com/terms)
- [Privacy Policy](https://salesflare.com/privacy)
- [GitHub organization](https://github.com/Salesflare)
- API support: support@salesflare.com

## Things an agent should know before calling

- **No idempotency.** No `Idempotency-Key` header exists on any of the 71
  operations. A retried create makes a duplicate record. Search before you write.
- **Pagination defaults to 10.** `limit` defaults to 10 and `offset` is
  zero-based. Responses are bare JSON arrays with no total count and no next-page
  link, so page until a page returns fewer than `limit` records.
- **No error schemas.** Not one operation declares a 4xx or 5xx response. Errors
  come back as `{statusCode, error, message}` — not RFC 9457. Handle by status.
- **No versioning.** basePath is `/`. No version segment, no version header, no
  date pinning, no deprecation policy, no Sunset headers, no changelog.
- **No response schemas.** The Swagger `definitions` block is empty; response
  bodies are typed as untyped strings.
- **Rate limits are undocumented.** 429 is documented as a possible status; no
  numeric limit, no `Retry-After`, no `RateLimit-*` headers. Back off
  exponentially.
- **The MCP grant is coarse.** The only scopes are `openid` and `offline_access` —
  they govern identity and token lifetime, not permissions. An approved MCP
  connection can write. Confirm with the human before creates and updates.
- **Ids are bare integers with no type prefix.** An id is not self-describing;
  always resolve it against the operation that produced it.