Home
Integrations
Partner API

Partner API

Scoped bearer tokens, per-token abilities and a request log — with public OpenAPI documentation.

At a glance

Plan: Business+
Last updated: September 2, 2026

What this covers

A REST API over your own data — parts, vehicles, orders, customers, categories and enquiries — so another system you use, or a partner you work with, can read and write without anyone sharing a password.

How it works in ELVPro

Tokens, not logins

You issue a bearer token per integration. It is shown once, stored hashed, and revoking it takes effect immediately — no password to rotate and nobody logging in as you.

Abilities per token

Each token carries only the capabilities you grant: read parts, write parts, read vehicles, read or write orders, customers, enquiries, read categories. A price-comparison partner gets parts.read and nothing else; a warehouse tool gets writes as well.

Your data only

Tenant scoping is applied by the framework, not by the endpoint — a token cannot see another yard's records under any request.

Rate limited per token

Every token has its own budget, so one runaway script cannot slow the storefront for buyers.

Every call is logged

Method, path, token, status and timing, kept in a request log you can review — so "the sync stopped working" is a question with an answer.

Versioned and documented

Endpoints live under /api/v1, with human-readable docs and an OpenAPI 3.0 document served publicly, so a developer can generate a client without waiting for you.

Deletion stays out

Customers cannot be deleted through the API — erasure goes through the GDPR pipeline, so a data-subject request is always handled properly.

When it happens

When this runs, and what it does
When	What happens
Whenever the partner calls	the API is live, no export window.
At the moment you revoke	the token stops working on the next request.
On every request	logging, rate limiting and the ability check, before the endpoint runs.

Why it matters

Sooner or later something else needs your data: an accounting tool, a partner's shop, a stock synchroniser, a script you wrote yourself. The alternatives are a shared login, a nightly CSV, or screen scraping — all of which break quietly and none of which can be revoked cleanly.

What we don't claim

The API is available on Business and Enterprise; Enterprise gets a higher rate limit. It covers your yard's operational data — not platform billing or another yard's records.

Other integrations

Ready to connect it?

Start a free trial and set this up in your own yard — no card required.

Start free All integrations