Applications & Credentials API
v1.0API endpoints for programmatically creating applications, generating API keys, registering webhooks, and retrieving organization metadata.
The Applications API enables automated provisioning of client apps, environments, secret keys, and webhook endpoints.
List Applications
/org/v1/appsList Organization Applications
Returns a paginated list of all active applications under the authenticated organization.
| 1 | curl -X GET "https://api.business.syncnexa.co/org/v1/apps" \ |
| 2 | -H "Authorization: Bearer sk_live_YOUR_SECRET_KEY" |
| 1 | { |
| 2 | "success": true, |
| 3 | "data": [ |
| 4 | { |
| 5 | "id": "app_8a7b6c5d4e3f", |
| 6 | "name": "Student Discount Store", |
| 7 | "environment": "live", |
| 8 | "status": "active", |
| 9 | "createdAt": "2026-08-10T14:32:00.000Z", |
| 10 | "webhookCount": 1, |
| 11 | "keyCount": 2 |
| 12 | } |
| 13 | ] |
| 14 | } |
Create Application
/org/v1/appsCreate New Application
Creates a new application container and optionally registers a webhook endpoint and event subscriptions in a single atomic transaction.
| Parameter | Type | Required | Description |
|---|---|---|---|
name | string | Required | Human-readable name of the application. |
environment | string | Optional | Target environment: "sandbox" or "live". |
description | string | Optional | Optional internal description or notes. |
webhookUrl | string | Optional | Optional HTTPS webhook URL to register with the application. |
webhookEvents | string[] | Optional | Array of event names to subscribe to when webhookUrl is provided. |
| 1 | { |
| 2 | "name": "Acme Campus Store", |
| 3 | "environment": "sandbox", |
| 4 | "webhookUrl": "https://api.acmestore.com/webhooks/syncnexa", |
| 5 | "webhookEvents": ["verification.completed", "consent.approved"] |
| 6 | } |
Get Application Details
/org/v1/apps/:appIdRetrieve Application Metadata
Fetches detailed configuration, credential counts, and metrics for a single application.
Generate API Key
/org/v1/keysGenerate API Key
Generates a new sk_test_ or sk_live_ secret key for the specified application. Returns the unmasked rawSecret once.
| Parameter | Type | Required | Description |
|---|---|---|---|
appId | string | Required | The target Application UUID. |
name | string | Required | Label describing what system or server uses this key. |
environment | string | Required | "sandbox" generates sk_test_... or "live" generates sk_live_... |
| 1 | { |
| 2 | "success": true, |
| 3 | "data": { |
| 4 | "id": "key_9b8a7c6d5e4f", |
| 5 | "appId": "app_8a7b6c5d4e3f", |
| 6 | "name": "Production Backend API", |
| 7 | "environment": "live", |
| 8 | "keyHint": "sk_live_****3b4c", |
| 9 | "rawSecret": "sk_live_YOUR_SECRET_KEY", |
| 10 | "createdAt": "2026-08-20T12:20:00.000Z" |
| 11 | } |
| 12 | } |
Revoke API Key
/org/v1/keys/:keyIdRevoke API Key
Permanently deletes and blacklists an API key. Any future requests using this key will immediately fail with HTTP 401.