Developers

The same API we build on.

RouteIQ's dashboard and driver app run on the REST API you get: 180+ endpoints, documented in an OpenAPI 3.0 spec. If it's in the product, you can automate it.

Quickstart

Your first request

Every site gets its own subdomain, and every request is scoped to it. Grab an API key from your site settings and you're off.

Create a jobcurl
# Base URL: https://<your-subdomain>.routeiq.com/api

curl -X POST https://acme.routeiq.com/api/job \
  -H "x-api-key: $ROUTEIQ_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "customer_first_name": "Dana",
    "customer_phone": "2125550100",
    "service_type_id": 12,
    "stops": [ ... ]
  }'

# List jobs, newest first
curl "https://acme.routeiq.com/api/job?page=1&per_page=20&sort=-created_at" \
  -H "x-api-key: $ROUTEIQ_API_KEY"
Authentication

Two ways in

Server-to-server integrations use API keys. User sessions and the mobile apps use access tokens.

Method Header When to use
API key x-api-key: <key> Server-to-server integrations. Register an application, scope keys to it.
Access token x-access-token: <token> User sessions and mobile driver apps. Obtain via POST /api/auth/signin, refresh via POST /api/auth/refresh.
Conventions

Boring, in the good way

The API behaves the same everywhere, so you learn it once.

Concern How it works
Multi-tenancy Every request is scoped to a site by subdomain. Data is fully isolated between sites; credentials from one site cannot touch another.
Pagination page and per_page (default 20, max 100). Responses include a meta object with total, page, and per_page.
Sorting sort=field, prefix with - for descending, e.g. sort=-created_at.
Errors Consistent JSON: {"error": "message", "code": "ERROR_CODE"} with standard HTTP status codes (400, 401, 403, 404, 409, 422, 500).
Rate limiting Per API key or token. Exceeding it returns 429 with a Retry-After header telling you when to come back.
Partial updates PATCH uses a three-state model: send a value to set it, omit the field to leave it unchanged, send null to clear it.
Events

Webhooks that don't lose things

Subscribe your endpoints to the events you care about: job state changes, payments, driver status. Delivery is queue-based and retried on failure, so a blip on your end doesn't mean a missed update.

Custom fields

Attach your own structured data to jobs, workers, and stops through the API. No schema change requests, no waiting on us.

Configurable workflows

Job, stop, and route states are defined per site over the API. Five fixed lifecycle phases underneath keep your automations stable whatever the states are named.

Integrations

Stripe, Twilio, Slack, Mailgun, Firebase push, and LiveKit are first-class integrations. Credentials are encrypted field-by-field at rest.

Audit log

Every change is recorded in an append-only log with the before and after state. Query it through the API like anything else.

Read the full reference

All 180+ endpoints with schemas, parameters, and example payloads, rendered straight from the OpenAPI spec.