GoHighLevel API 2026: Complete Documentation Guide, Endpoints & Setup

What Is the GoHighLevel API

The GoHighLevel API (also called HighLevel API or GHL API) is a REST-based application programming interface providing programmatic access to every major function of the HighLevel platform. Developers use the API to build custom integrations, third-party apps for the HighLevel App Marketplace, custom workflow automation beyond the visual builder, and enterprise-grade data integrations between GoHighLevel and external systems.

The current API version is v2 (Public API) released in 2024, replacing the legacy v1 (Private API) that shipped when GoHighLevel first launched in 2018. According to HighLevel’s official developer documentation, v2 is the recommended API for all new development, while v1 remains functional for existing integrations but receives minimal new feature development.

The API uses standard REST architecture with JSON request/response bodies, OAuth 2.0 authentication for app-based integrations, and API key authentication for simple use cases. All endpoints operate on the base URL https://services.leadconnectorhq.com with resource-based URL patterns following industry conventions like Stripe API or HubSpot Developer API.

Common searches around this topic include “GoHighLevel API,” “GoHighLevel API documentation,” “GoHighLevel API docs,” “GoHighLevel API v2,” “GoHighLevel API key,” and specific endpoint queries. This guide covers authentication, rate limits, major endpoints, common patterns, and implementation strategies.

GoHighLevel API v1 vs v2

Feature	API v1 (Legacy)	API v2 (Current)
Release Year	2018	2024
Status	Legacy (functional but not recommended for new dev)	Current standard
Authentication	API key only	OAuth 2.0 + API key
Base URL	https://rest.gohighlevel.com/v1/	https://services.leadconnectorhq.com
Marketplace Apps	Not supported	Full support
Rate Limits	Lower limits	500 req/10 sec/sub-account
Webhook Subscriptions	Limited	Comprehensive
Endpoint Coverage	Basic operations	Full platform coverage
New Feature Development	Minimal	Active

Migration Recommendation

All new integrations should use API v2. Existing v1 integrations continue functioning but should migrate to v2 for access to new features, better rate limits, and long-term platform support. HighLevel has not announced v1 deprecation date but strongly recommends v2 for all new development.

Authentication: OAuth 2.0 and API Keys

OAuth 2.0 Authentication (Recommended)

OAuth 2.0 is the standard authentication method for API v2 and required for marketplace apps. The flow follows industry-standard OAuth 2.0 specification similar to Google OAuth or Microsoft OAuth.

OAuth 2.0 Flow Steps

1. Register your app in the HighLevel Marketplace to receive Client ID and Client Secret
2. Redirect user to authorization URL with required scopes
3. User authorizes app through GoHighLevel interface
4. Receive authorization code at callback URL
5. Exchange code for access token via POST to token endpoint
6. Use access token in Authorization header: Bearer YOUR_ACCESS_TOKEN
7. Refresh token when access token expires (typically 24 hours)

API Key Authentication (Simple)

For simple integrations and internal automation, API v2 also supports API key authentication. Generate API keys through Agency View > Settings > Business Info > API Key. Include the key in requests using the Authorization header:

Authorization: Bearer YOUR_API_KEY
Version: 2021-07-28
Content-Type: application/json

Required Headers

• Authorization: Bearer token (OAuth or API key)
• Version: API version date (e.g., 2021-07-28)
• Content-Type: application/json for POST/PUT requests
• Accept: application/json

API Rate Limits

Handling Rate Limits

Well-designed integrations handle rate limiting gracefully. When rate limits are exceeded, the API returns HTTP 429 Too Many Requests with a Retry-After header indicating when to retry. Implement exponential backoff for retry logic to avoid cascading failures.

Rate Limit Best Practices

• Batch operations when possible – Use bulk endpoints instead of per-record calls
• Cache read-heavy data – Reduce repeated calls for the same information
• Implement queuing – Buffer requests during traffic spikes
• Monitor rate limit headers – Adjust behavior based on remaining capacity
• Use webhooks for events – Instead of polling for changes
• Distribute across sub-accounts – Rate limits are per sub-account

Major API Endpoints Overview

Contacts Endpoints

Endpoint	Method	Description
/contacts/	GET	Search/list contacts
/contacts/	POST	Create contact
/contacts/{contactId}	GET	Get contact details
/contacts/{contactId}	PUT	Update contact
/contacts/{contactId}	DELETE	Delete contact
/contacts/{contactId}/tags	POST	Add tags to contact
/contacts/{contactId}/tags	DELETE	Remove tags from contact

Opportunities Endpoints

• /opportunities/ – CRUD operations on opportunities
• /opportunities/pipelines – Pipeline configuration
• /opportunities/{opportunityId}/status – Update opportunity status
• /opportunities/{opportunityId}/pipeline-stage – Move stages

Calendars Endpoints

• /calendars/ – Calendar configuration
• /calendars/events – Appointment management
• /calendars/free-slots – Available booking slots
• /calendars/{calendarId}/appointments – Appointment CRUD

Conversations Endpoints

• /conversations/ – Message threads
• /conversations/messages – Individual messages
• /conversations/messages/inbound – Send inbound messages
• /conversations/messages/outbound – Send SMS/email/WhatsApp

Workflows Endpoints

• /workflows/ – List workflows
• /workflows/{workflowId}/subscriptions – Enroll contacts
• /workflows/{workflowId}/subscriptions/{contactId} – Remove enrollment

Payments Endpoints

• /payments/orders – Order management
• /payments/subscriptions – Subscription operations
• /payments/invoices – Invoice generation and retrieval
• /payments/transactions – Transaction history

Locations (Sub-Accounts) Endpoints

• /locations/ – Sub-account CRUD (agency-level API access required)
• /locations/{locationId} – Specific sub-account details
• /locations/{locationId}/users – Sub-account user management

How to Get GoHighLevel API Key

Step-by-Step API Key Generation

1. Log into agency view. Access GoHighLevel dashboard as agency admin. API access requires Agency Pro plan ($497/month).
2. Navigate to Settings. Click Agency View > Settings > Business Info.
3. Locate API Key section. Scroll to API Key area within Business Info page.
4. Generate or copy API key. Click “Generate API Key” for new keys. Existing keys can be copied for use.
5. Store key securely. Treat like a password. Never commit to public repositories. Use environment variables in production.
6. Test authentication. Verify key works with simple GET request to /locations/ endpoint.

Sub-Account API Keys

For sub-account-specific operations, sub-account API keys can be generated inside each sub-account’s Settings > Business Info. These keys have permissions limited to that specific sub-account. Use agency-level keys for cross-sub-account operations.

Webhooks: Real-Time Event Notifications

Webhooks enable real-time notifications when events occur in GoHighLevel without polling the API. Configure webhook subscriptions to receive HTTP POST notifications to your specified endpoint URL.

Supported Webhook Events

• Contact events: ContactCreate, ContactUpdate, ContactDelete, ContactTagUpdate
• Opportunity events: OpportunityCreate, OpportunityUpdate, OpportunityStatusUpdate, OpportunityStageUpdate
• Appointment events: AppointmentCreate, AppointmentUpdate, AppointmentDelete
• Message events: InboundMessage, OutboundMessage
• Order events: OrderCreate, OrderStatusUpdate
• Payment events: PaymentReceived, SubscriptionCreate, SubscriptionCancel
• Workflow events: WorkflowSubscribed, WorkflowUnsubscribed
• Note events: NoteCreate, NoteUpdate, NoteDelete

Webhook Payload Structure

Webhook payloads follow standardized JSON structure including event type, timestamp, location ID, and event-specific data. Similar patterns to Stripe webhooks or HubSpot webhooks.

Webhook Best Practices

• Return 2xx status quickly – Process asynchronously after acknowledgment
• Verify webhook signatures – Use HMAC verification to prevent forgery
• Handle idempotency – Same event may deliver multiple times
• Implement retry logic – Handle temporary failures gracefully
• Log all webhook events – Essential for debugging and audit trails
• Configure timeout properly – 5-10 seconds typical maximum processing time

Marketplace Apps: Building for the App Store

The HighLevel App Marketplace enables developers to build and monetize custom apps used by agencies and their clients. Marketplace apps use OAuth 2.0 authentication and can charge subscription fees, one-time payments, or offer free tiers.

Marketplace App Development Process

1. Register developer account at marketplace.gohighlevel.com
2. Create app in developer console – Get Client ID and Client Secret
3. Define required OAuth scopes – Contacts, opportunities, calendars, etc.
4. Build OAuth 2.0 flow – Authorization, token exchange, refresh
5. Develop app functionality – Use GoHighLevel API v2 for platform operations
6. Configure webhook subscriptions – For real-time event handling
7. Submit app for review – HighLevel reviews for security and quality
8. Launch and market app – Marketplace listing plus external marketing

Marketplace Revenue Opportunity

Marketplace apps generate revenue through agency subscriptions (agencies pay monthly per feature access) or sub-account subscriptions (each connected sub-account generates recurring revenue). Successful marketplace apps like CloseBot AI generate substantial recurring revenue through marketplace distribution.

Common API Use Cases

1. Custom CRM Data Sync

Sync contacts and opportunities between GoHighLevel and external systems like Salesforce, HubSpot, or custom enterprise CRMs. Bi-directional sync ensures data consistency across platforms.

2. Automated Sub-Account Creation

Enterprise agencies with high-volume client onboarding automate sub-account creation through API. Complete sub-account setup including branding, snapshots, and initial configuration in 5-10 minutes per client vs 30-60 minutes manual.

3. Custom Reporting Dashboards

Build custom reporting dashboards pulling data from GoHighLevel API. Aggregate metrics across all client sub-accounts. Client-specific dashboards showing performance without exposing raw GoHighLevel interface.

4. Advanced Workflow Automation

Extend beyond visual workflow builder capabilities. Trigger complex external systems from GoHighLevel events. Implement business logic requiring custom code that cannot be built in visual workflow builder.

5. White Label Mobile Apps

Build custom mobile apps beyond HighLevel’s white label mobile app add-on. Deeper customization for enterprise agencies with specific mobile requirements.

6. AI Integrations Beyond Native

Integrate custom AI systems like Anthropic Claude, custom OpenAI assistants, or specialized AI models. Extend beyond GoHighLevel’s native AI Employee for specific use cases.

7. Enterprise Integrations

Connect GoHighLevel to enterprise systems like Oracle ERP, SAP, custom in-house systems, or industry-specific software (medical EMR, real estate MLS, etc.).

8. Facebook Conversion API Integration

Send server-side conversion events to Facebook Conversion API for improved ad optimization. Bypass browser tracking limitations from iOS updates and ad blockers.

Sample API Requests

Create a Contact (POST)

POST https://services.leadconnectorhq.com/contacts/
Authorization: Bearer YOUR_ACCESS_TOKEN
Version: 2021-07-28
Content-Type: application/json

{
  "firstName": "John",
  "lastName": "Doe",
  "email": "john@example.com",
  "phone": "+15551234567",
  "locationId": "YOUR_LOCATION_ID",
  "tags": ["new-lead", "website"],
  "source": "API Integration"
}

Get Contact by ID (GET)

GET https://services.leadconnectorhq.com/contacts/CONTACT_ID
Authorization: Bearer YOUR_ACCESS_TOKEN
Version: 2021-07-28

Send SMS Message (POST)

POST https://services.leadconnectorhq.com/conversations/messages
Authorization: Bearer YOUR_ACCESS_TOKEN
Version: 2021-07-28
Content-Type: application/json

{
  "type": "SMS",
  "contactId": "CONTACT_ID",
  "message": "Hello from the API!"
}

API Development Tools & Libraries

Official Documentation

• API v2 docs: highlevel.stoplight.io
• Marketplace docs: marketplace.gohighlevel.com/docs
• Developer community: Active Facebook group with HighLevel developer staff

Recommended Development Tools

• Postman – API testing and documentation
• Insomnia – Alternative REST client
• ngrok – Local webhook testing with public tunnels
• Swagger/OpenAPI – API specification standard used by HighLevel docs
• GitHub – Community-maintained SDK repositories

Language-Specific Libraries

No official SDK is published by HighLevel, but community-maintained libraries exist for Node.js, Python, PHP, and Ruby. Search npm registry and PyPI for third-party packages. For production use, evaluate library quality carefully before deployment.

Common API Integration Mistakes

• Not handling rate limits. Aggressive polling exceeds 500 req/10 sec limit, causing 429 errors. Implement exponential backoff and use webhooks instead of polling.
• Storing API keys in code. Security disaster when code repositories become public. Use environment variables or secrets management.
• Ignoring OAuth token refresh. Access tokens expire after 24 hours. Implement automatic refresh before expiration.
• No webhook signature verification. Enables malicious webhook forgery. Always verify HMAC signatures.
• Synchronous webhook processing. Blocks acknowledgment causing HighLevel to retry same event. Return 2xx immediately, process asynchronously.
• Not handling errors gracefully. API returns various error codes. Implement proper error handling with logging and retry logic.
• Missing Version header. API requires Version header on all requests. Missing causes 400 errors.
• Using v1 for new development. Legacy version misses new features. Use v2 for all new development.

API Pricing and Access

Access Level	Plan Required	Rate Limits	Marketplace
Sub-Account API	All plans (limited)	Standard	Not applicable
Agency API	Unlimited $297/mo	Standard	Consumer access
Full API Access	Agency Pro $497/mo	Full 500/10s	Publisher access
Marketplace Publisher	Agency Pro required	Full	Yes

How Agencies Use the API

Automated Onboarding Systems

API-driven onboarding creates new sub-accounts, deploys snapshots, configures white label branding, and sends welcome emails in 3-5 minutes automated vs 30-60 minutes manual. Essential for high-volume agencies past 25 clients.

Custom Client Portals

Build custom client portals showing reporting data pulled from GoHighLevel API. Enables agency branding without exposing raw GoHighLevel interface. Common feature for premium agency service tiers.

Enterprise System Integration

Connect GoHighLevel to enterprise systems (custom CRMs, industry-specific software, in-house databases). Enables Fortune 500 clients requiring integration with existing tech stacks.

SaaS Product Development

Build SaaS products powered by GoHighLevel backend. White label the entire experience while leveraging GoHighLevel’s platform capabilities. Revenue model: monthly subscription for the SaaS product with GoHighLevel operating invisibly underneath.

Advanced Analytics and BI

Extract data from GoHighLevel API into business intelligence platforms like Tableau, Power BI, or Looker. Enables enterprise-grade reporting beyond GoHighLevel’s native analytics.

How GHL Desk Builds Custom API Integrations

GHL Desk operates as a specialist white label GoHighLevel fulfillment team. Custom API development is one of our core service areas for agencies that need capabilities beyond native platform features. Founded by operators with 5+ years hands-on GoHighLevel experience including deep API integration work.

Every engagement starts with a free 30-minute strategy call that audits your current API needs, evaluates whether custom API development is the right solution vs native features or middleware alternatives, and maps the complete deployment plan. If we are not the right fit, we tell you directly.

For qualifying agencies, our developer team handles complete API integration development including OAuth 2.0 authentication implementation for marketplace apps and secure integrations, REST API integration development across all major endpoints (contacts, opportunities, calendars, workflows, conversations, payments), webhook subscription and processing with signature verification and idempotency, marketplace app development including scope configuration, OAuth flow, and app submission, N8N advanced workflow automation connecting GoHighLevel API to complex external systems, Facebook Conversion API integration for improved ad tracking, enterprise system integrations with Salesforce, HubSpot, custom CRMs, and industry-specific software, automated sub-account provisioning for high-volume onboarding, and ongoing maintenance including rate limit optimization and error monitoring.

Every deliverable runs under your white label brand. Pricing is transparent and flat-rate. Pay-as-you-go at $150 per 5-hour block. Shared team at $997/month for up to 25 clients. Dedicated team at $2,497/month with unlimited scope. Enterprise options for agencies with complex API integration requirements. Book a free strategy call at ghldesk.com/book-a-call to evaluate whether GHL Desk fits your API integration needs.