Data API Reference

X-API-Key: 3pm_abc123def456.xyzSecretKey789...

curl -X GET "https://auth.3pm.app/api/data/users" \
  -H "X-API-Key: 3pm_abc123.yourSecretKeyHere"

{
  "data": {
    "data": [
      {
        "id": "subscription_id",
        "tenantId": "60d5ecf4f1b5a23456789012",
        "tenant": { "name": "Acme Corporation", "slug": "acme-corp" },
        "clientId": "3pm_app1",
        "application": { "name": "My App" },
        "status": "active",
        "subscribedAt": "2026-01-01T00:00:00.000Z"
      }
    ],
    "pagination": { "page": 1, "limit": 50, "total": 25, "hasMore": false }
  },
  "error": null
}

# Get page 2 with 25 items per page
curl "https://auth.3pm.app/api/data/users?page=2&limit=25" \
  -H "X-API-Key: 3pm_abc123.secret"

# Get users updated in the last 24 hours
curl "https://auth.3pm.app/api/data/users?updatedSince=2026-01-22T00:00:00Z" \
  -H "X-API-Key: 3pm_abc123.secret"

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 95
X-RateLimit-Reset: 60

async function fetchWithRetry(url, options, maxRetries = 3) {
  for (let i = 0; i < maxRetries; i++) {
    const response = await fetch(url, options);
    
    if (response.status === 429) {
      const resetIn = response.headers.get('X-RateLimit-Reset') || 60;
      console.log(`Rate limited. Waiting ${resetIn} seconds...`);
      await new Promise(resolve => setTimeout(resolve, resetIn * 1000));
      continue;
    }
    
    return response;
  }
  throw new Error('Max retries exceeded');
}

{
  "data": null,
  "error": "Insufficient permissions. Required scope: users:read"
}

const API_URL = 'https://auth.3pm.app';
const API_KEY = process.env.DATA_API_KEY!;

interface SyncResult {
  users: any[];
  lastSync: string;
}

async function syncUsers(lastSync?: string): Promise<SyncResult> {
  const url = new URL(`${API_URL}/api/data/users`);
  if (lastSync) {
    url.searchParams.set('updatedSince', lastSync);
  }
  url.searchParams.set('limit', '100');

  const users: any[] = [];
  let page = 1;
  let hasMore = true;

  while (hasMore) {
    url.searchParams.set('page', page.toString());

    const response = await fetch(url, {
      headers: { 'X-API-Key': API_KEY },
    });

    if (!response.ok) {
      throw new Error(`API error: ${response.status}`);
    }

    const result = await response.json();
    users.push(...result.data.data);
    hasMore = result.data.pagination.hasMore;
    page++;
  }

  return {
    users,
    lastSync: new Date().toISOString(),
  };
}

// Usage
const { users, lastSync } = await syncUsers('2026-01-22T00:00:00Z');
console.log(`Synced ${users.length} users`);

import os
import requests
from datetime import datetime

API_URL = 'https://auth.3pm.app'
API_KEY = os.environ['DATA_API_KEY']

def sync_users(updated_since=None):
    headers = {'X-API-Key': API_KEY}
    params = {'limit': 100, 'page': 1}
    
    if updated_since:
        params['updatedSince'] = updated_since
    
    users = []
    has_more = True
    
    while has_more:
        response = requests.get(
            f'{API_URL}/api/data/users',
            headers=headers,
            params=params
        )
        response.raise_for_status()
        
        data = response.json()['data']
        users.extend(data['data'])
        has_more = data['pagination']['hasMore']
        params['page'] += 1
    
    return users, datetime.utcnow().isoformat() + 'Z'

# Usage
users, last_sync = sync_users('2026-01-22T00:00:00Z')
print(f'Synced {len(users)} users')

# List all users
curl "https://auth.3pm.app/api/data/users" \
  -H "X-API-Key: 3pm_abc123.secret"

# Get users updated since yesterday
curl "https://auth.3pm.app/api/data/users?updatedSince=2026-01-22T00:00:00Z" \
  -H "X-API-Key: 3pm_abc123.secret"

# Get a specific tenant with members
curl "https://auth.3pm.app/api/data/tenants/60d5ecf4f1b5a23456789012" \
  -H "X-API-Key: 3pm_abc123.secret"

# Get active subscriptions for a tenant
curl "https://auth.3pm.app/api/data/subscriptions?tenantId=60d5ecf4f1b5a23456789012&status=active" \
  -H "X-API-Key: 3pm_abc123.secret"

# Get all admins across tenants
curl "https://auth.3pm.app/api/data/members?role=admin" \
  -H "X-API-Key: 3pm_abc123.secret"

# Add a member directly to a tenant
curl -X POST "https://auth.3pm.app/api/data/members" \
  -H "X-API-Key: 3pm_abc123.secret" \
  -H "Content-Type: application/json" \
  -d '{"tenantId": "60d5ecf4f1b5a23456789012", "userId": "507f1f77bcf86cd799439011", "role": "member"}'

# Update a member's role
curl -X PATCH "https://auth.3pm.app/api/data/members/68a1b2c3d4e5f6a7b8c9d0e1" \
  -H "X-API-Key: 3pm_abc123.secret" \
  -H "Content-Type: application/json" \
  -d '{"role": "admin"}'

# Remove a member
curl -X DELETE "https://auth.3pm.app/api/data/members/68a1b2c3d4e5f6a7b8c9d0e1" \
  -H "X-API-Key: 3pm_abc123.secret"

# Invite a user to a tenant
curl -X POST "https://auth.3pm.app/api/data/invitations" \
  -H "X-API-Key: 3pm_abc123.secret" \
  -H "Content-Type: application/json" \
  -d '{"tenantId": "60d5ecf4f1b5a23456789012", "email": "new@example.com", "role": "member", "assignedApps": ["3pm_app1"]}'

# Bulk invite users
curl -X POST "https://auth.3pm.app/api/data/invitations/bulk" \
  -H "X-API-Key: 3pm_abc123.secret" \
  -H "Content-Type: application/json" \
  -d '{"tenantId": "60d5ecf4f1b5a23456789012", "invitations": [{"email": "a@example.com", "role": "member", "assignedApps": ["3pm_app1"]}, {"email": "b@example.com", "role": "admin"}]}'

# List pending invitations for a tenant
curl "https://auth.3pm.app/api/data/invitations?tenantId=60d5ecf4f1b5a23456789012&status=pending" \
  -H "X-API-Key: 3pm_abc123.secret"

# Resend an invitation
curl -X POST "https://auth.3pm.app/api/data/invitations/68a1b2c3d4e5f6a7b8c9d0e1/resend" \
  -H "X-API-Key: 3pm_abc123.secret"

# Cancel an invitation
curl -X DELETE "https://auth.3pm.app/api/data/invitations/68a1b2c3d4e5f6a7b8c9d0e1" \
  -H "X-API-Key: 3pm_abc123.secret"