Open API for everything. Built for partners.

Polooma is API-first. Every action you can do in the panel is also exposed through REST and GraphQL endpoints, and every state change emits a webhook. Use it to embed bookings on your platform, sync data to your warehouse, or build something we haven't thought of yet.

Core endpoints

A REST endpoint for every resource (bookings, clients, services, staff, locations, payments) and a GraphQL endpoint for one-shot queries that span resources. Pagination, filtering, and field selection on every collection.

GET /v1/bookings?from=2026-04-27&status=confirmed
Authorization: Bearer pk_live_…

Real-time webhooks

Subscribe to events: booking.created, booking.confirmed, booking.cancelled, payment.completed, client.created, no_show.detected. Signed payloads (HMAC-SHA256), automatic retries with exponential backoff, dead-letter inspection.

{
  "event": "booking.confirmed",
  "id": "evt_2c8…",
  "data": { "booking_id": "bk_8e3…" },
  "signature": "sha256=…"
}

OAuth 2.0

Standard OAuth 2.0 with refresh tokens. Per-tenant API keys for server-to-server use. All requests rate-limited per key, all responses include rate-limit headers. CORS-ready for browser-based clients.

SDKs and tooling

Official SDKs for JavaScript / TypeScript, PHP and Python. Postman collection, OpenAPI 3.1 spec, GraphQL schema introspection, sandbox environment with seeded data. Test keys never expire.

npm install @polooma/sdk
composer require polooma/sdk
pip install polooma

Ready to start?

Sandbox keys are free and self-service. Production keys come with the Network and Platform plans.

Get sandbox access

Full reference at docs.polooma.com (coming soon — request early access via the contact form).

Want to see it for yourself?

Book a 20-minute demo or start in solo for €19/month.