# Zoho CRM

> Zoho CRM is Zoho Corporation's sales and customer-relationship platform. Its REST API (current major version v8) is documented and, since the v8 release, published as first-party OpenAPI 3.1.0 — 105 specification files covering 405 operations at https://github.com/zoho/crm-oas. Authentication is OAuth 2.0 authorization-code against accounts.zoho.com, with 458 distinct scopes. The API host is region-templated: https://zohoapis.{dc}/crm/{version} where dc is one of com, eu, in, cn, au.

Generated by API Evangelist on 2026-08-13 from this provider profile. Zoho serves no llms.txt of its own (https://www.zoho.com/llms.txt and https://www.zoho.com/crm/llms.txt both return 404).

## Before your first call

- Authorization header is `Authorization: Zoho-oauthtoken {access_token}` — NOT `Bearer`. This is the most common first-call failure.
- Access tokens live one hour; refresh tokens live until revoked.
- Resolve your org's data centre first. The same account is not reachable on every host.
- Module names are runtime data. Call `getModules` before constructing a record body, and substitute the real module API name into scopes: `ZohoCRM.modules.Leads.READ`, not `ZohoCRM.modules.{module_API_name}.READ`.
- A `200` does not mean a batch succeeded. Batch writes return `207 Multi-Status` with a per-record `code`/`status` inside `data[]`.
- There is no idempotency key. Retrying `createRecords` creates duplicates — use `upsertRecords` with `duplicate_check_fields` for any retryable write.

## APIs

- [Zoho CRM REST API v8](https://www.zoho.com/crm/developer/docs/api/v8/): 105 OpenAPI files, 405 operations, base https://zohoapis.{dc}/crm/{version}
- [Records](https://www.zoho.com/crm/developer/docs/api/v8/get-records.html): getRecords, getRecord, createRecords, updateRecord, updateRecords, deleteRecord, deleteRecords, upsertRecords, getDeletedRecords, cloneRecord
- [Modules metadata](https://www.zoho.com/crm/developer/docs/api/v8/): getModules — the discovery call every integration starts with
- [COQL](https://www.zoho.com/crm/developer/docs/api/v8/COQL-Overview.html): SQL-like query over CRM records
- [Bulk Read / Bulk Write](https://www.zoho.com/crm/developer/docs/api/v8/): asynchronous job-based import and export
- [Composite Requests](https://www.zoho.com/crm/developer/docs/api/v8/): batch several operations into one call
- [Notifications (webhooks)](https://www.zoho.com/crm/developer/docs/api/v2/notifications/): register a notify_url and receive create/edit/delete callbacks

## Specs

- OpenAPI (first-party, verbatim): https://github.com/zoho/crm-oas
- OpenAPI mirror in this profile: openapi/ (105 files, prefixed `zoho-crm-`)
- AsyncAPI for the Instant Notifications callback surface: asyncapi/zoho-crm-notifications-asyncapi.yml
- OpenID Connect discovery: https://accounts.zoho.com/.well-known/openid-configuration

## Artifacts

- Authentication: authentication/zoho-crm-authentication.yml
- OAuth scopes (458): scopes/zoho-crm-scopes.yml
- Conventions — pagination, envelope, versioning, retry safety: conventions/zoho-crm-conventions.yml
- Errors: errors/zoho-crm-problem-types.yml
- Rate limits (credit-based, 24h rolling): rate-limits/zoho-crm-rate-limits.yml
- Plans and pricing: plans/zoho-crm-plans-pricing.yml
- Lifecycle and versioning: lifecycle/zoho-crm-lifecycle.yml
- Changelog: changelog/zoho-crm-changelog.yml
- Data model: data-model/zoho-crm-data-model.yml
- Packages and SDKs: packages/zoho-crm-packages.yml
- CLI (ZET, widgets/extensions): cli/zoho-crm-cli.yml
- Embeddable components: components/zoho-crm-components.yml
- Sandbox: sandbox/zoho-crm-sandbox.yml
- MCP: mcp/zoho-crm-mcp.yml, mcp/zoho-crm-tool-crosswalk.yml
- Conformance: conformance/zoho-crm-conformance.yml
- Security: security/zoho-crm-domain-security.yml, security/zoho-crm-vulnerability-disclosure.yml, security/zoho-crm-trust-center.yml
- Well-known: well-known/zoho-crm-well-known.yml
- Agent skills: skills/_index.yml

## Docs

- Developer portal: https://www.zoho.com/crm/developer/
- API v8 reference: https://www.zoho.com/crm/developer/docs/api/v8/
- OpenAPI specification page: https://www.zoho.com/crm/developer/docs/api/v8/openapi-specification.html
- OAuth overview: https://www.zoho.com/crm/developer/docs/api/v8/oauth-overview.html
- Scopes: https://www.zoho.com/crm/developer/docs/api/v8/scopes.html
- API limits: https://www.zoho.com/crm/developer/docs/api/v8/api-limits.html
- Status codes: https://www.zoho.com/crm/developer/docs/api/v8/status-codes.html
- Multi-DC: https://www.zoho.com/crm/developer/docs/api/v8/multi-dc.html
- Server-side SDKs: https://www.zoho.com/crm/developer/docs/server-side-sdks/
- Widgets: https://www.zoho.com/crm/developer/docs/widgets/
- API console (create OAuth clients): https://api-console.zoho.com/
- Status: https://status.zoho.com/
- Community: https://help.zoho.com/portal/en/community/zoho-crm
- Pricing: https://www.zoho.com/crm/zohocrm-pricing.html
- Compliance: https://www.zoho.com/compliance.html
- Security policy: https://www.zoho.com/.well-known/security.txt