Overview

The BizPilot API gives you programmatic access to invoices, clients, items, and payments. Use it to automate document creation, sync data, or build custom integrations.

Base URL

https://api.bizpilot.co.il/v1

Versioning

The current version is v1. Breaking changes are communicated via email and changelog at least 30 days in advance.

Content Type

All requests must include Content-Type: application/json. All responses are JSON.

Authentication

BizPilot uses API keys to authenticate all requests. Manage your keys under Account Settings → API.

Bearer Token

Include your key in every request header:

Authorization: Bearer YOUR_API_KEY
Never expose your API key in client-side code. Rotate immediately if compromised.

Scopes

ScopeDescription
documents:readRead documents
documents:writeCreate and update documents
clients:readRead client records
clients:writeCreate and update clients
payments:writeCreate payment links

Errors

BizPilot uses standard HTTP status codes to indicate success or failure.

CodeMeaning
200Success
201Resource created
400Bad request – check your parameters
401Unauthorized – invalid or missing API key
403Forbidden – insufficient scope
404Resource not found
422Validation error
429Rate limit exceeded
500Internal server error

Error Object

All error responses return a JSON object:

{ "error": { "code": "not_found", "message": "Document not found", "status": 404 } }

Rate Limits

Requests are limited per API key. Limits vary by plan:

PlanReq / minuteReq / day
Basic6010,000
Best12050,000
Extra300200,000

Response Headers

X-RateLimit-Limit: 120
X-RateLimit-Remaining: 87
X-RateLimit-Reset: 1741650000

Create Document

POST /documents

Creates a new document (invoice, receipt, quote, credit note).

Body Parameters

ParameterTypeReqDescription
typestringinvoice, receipt, credit_note, quote
client_idstringID of an existing client
itemsarrayArray of line items
currencystringDefault: ILS
vat_typestringincluded · excluded · exempt
issue_datestringISO 8601. Default: today
due_datestringISO 8601
send_emailbooleanEmail client on creation. Default: false

Retrieve Document

GET /documents/{id}

Returns a single document by ID.

Path Parameters

ParameterTypeDescription
idstringThe document ID

Update Document

PUT /documents/{id}

Updates an existing document. Only draft status documents can be modified.

Body Parameters

Accepts the same fields as Create Document. Include only the fields you wish to update.

List Documents

GET /documents

Returns a paginated list of all documents.

Query Parameters

ParameterTypeDescription
typestringFilter by document type
statusstringdraft · sent · paid · cancelled
client_idstringFilter by client
fromstringISO 8601 start date
tostringISO 8601 end date
pageintegerDefault: 1
per_pageintegerDefault: 20 · Max: 100

Create Client

POST /clients

Creates a new client record.

Body Parameters

ParameterTypeReqDescription
namestringClient or company name
emailstringPrimary email
phonestringPhone number
tax_idstringBusiness registration number
addressobjectstreet, city, zip
currencystringDefault: ILS

Retrieve Client

GET /clients/{id}

Returns a single client by ID.

Path Parameters

ParameterTypeDescription
idstringThe client ID

List Clients

GET /clients

Returns a paginated list of all clients.

Query Parameters

ParameterTypeDescription
searchstringSearch by name, email, or tax ID
pageintegerDefault: 1
per_pageintegerDefault: 20 · Max: 100

Create Item

POST /items

Creates a reusable product or service item for use in documents.

Body Parameters

ParameterTypeReqDescription
namestringItem name
pricenumberUnit price
currencystringDefault: ILS
descriptionstringOptional description
vat_typestringincluded · excluded · exempt

List Items

GET /items

Returns all items in your catalog.

Query Parameters

ParameterTypeDescription
searchstringSearch by item name
pageintegerDefault: 1

Webhooks

Webhooks send real-time HTTP POST notifications to your server when events occur.

Available Events

EventDescription
document.createdA new document was created
document.sentA document was sent to a client
document.paidA document was marked as paid
payment.completedAn online payment was completed
client.createdA new client was created

Verification

Each request includes X-BizPilot-Signature — an HMAC-SHA256 of the raw payload signed with your webhook secret. Always verify before processing.