Todo.work API

No parameters — send the authentication headers only.

Any valid key

// Health check — verifies your credentials
const response = await fetch('https://api.todo.work/api_integrations/', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": 200,
    "message": "API is working",
    "response": []
  }
}

Name	Type	Description
id optional · query	int	A single project id. Overrides is_archive.
client_id optional · query	int	Filter by client.
is_archive optional · query	bool	true = archived/deleted, false = active (default). Accepts true/false, 1/0 and the strings "true"/"false" over a query string.

Any key

• The archived flag on each row is is_deleted, not is_archive — there is no is_archive field in the response.
• hours is a formatted "HH:MM" string, not a number.
• Rows also carry the project permission columns (perms_*), notes, folder_id, and the joined client columns cln_name / cln_phone / cln_email. Only the commonly used fields are shown below.

// List active projects for a client
const response = await fetch('https://api.todo.work/api_integrations/projects/results?client_id=5&is_archive=false', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": [
    {
      "id": 12,
      "name": "Website Redesign",
      "type": "hourly",
      "client_id": 5,
      "color": "#59ce8f",
      "hours": "42:30",
      "open_tickets": 7,
      "is_deleted": 0,
      "last_update": "2026-06-26 14:11:00",
      "departments": [1, 3],
      "cln_name": "Acme Inc.",
      "notes": "",
      "folder_id": null
    }
  ]
}

Name	Type	Description
id required · query	int	Project id (must be > 0).

Any key

// Get project 123
const response = await fetch('https://api.todo.work/api_integrations/projects/get?id=123', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "id": 123,
    "name": "Website Redesign",
    "type": "hourly",
    "departments": [ { "id": 1, "name": "Design" } ],
    "docs": [],
    "docs_token": "…"
  }
}

Name	Type	Description
id optional · body	int	Include to update; omit to create.
name required · body	string	Project name.
type required · body	enum	"hourly" (time-tracked) or "fixed" (fixed price).
client_id optional · body	int | "add"	Existing client id, or "add" to create a new client (with client_name / client_email).
price_hour optional · body	decimal	Hourly rate (type=hourly only).
price optional · body	decimal	Fixed price (type=fixed only).
target_monthly_hours optional · body	decimal	Monthly hours target (type=hourly only).
departments optional · body	array	Array of { id } objects or ids.
date_deadline optional · body	string	Any parseable date; stored as Y-m-d.
open_first_ticket optional · body	bool	Open a starter ticket on create (default true).

Any key (needs tasks.manage)

• The id comes back as a number in both directions — create and update. (It used to be a string on create.)

// Create a new hourly project
const response = await fetch('https://api.todo.work/api_integrations/projects/save', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    name: 'Website Redesign',
    type: 'hourly',
    client_id: 5,
    price_hour: '50.00',
    target_monthly_hours: '160',
    departments: [{ id: 1 }]
  })
});

const data = await response.json();
console.log(data.response);

// On success the new (or updated) project id:
{ "response": 87 }

Name	Type	Description
filter_by optional · body	enum	pending | finished | my | all | search.
project_id optional · body	int | array | "all"	One id, a list, or "all" accessible projects.
handler optional · body	int | array | "none"	Filter by handler; "none" = unassigned.
q optional · body	string	Search text (min 3 chars, with filter_by=search).
page optional · body	int	1-indexed page (default 1).
limit optional · body	int	Per page (default 100).
order optional · body	string	date_updated (default) | date_created | scheduled_date | handler.
order_dir optional · body	enum	ASC | DESC (default DESC).

Any key

• The response always carries a projects array alongside tickets.
• project_totals, total_results and next_token are returned ONLY when project_id is sent. Without it the response is just { tickets, projects } — so paginate by sending project_id.

// Pending tickets in projects 1 and 2 handled by user 5
const response = await fetch('https://api.todo.work/api_integrations/tickets/results', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    filter_by: 'pending',
    project_id: [1, 2],
    handler: 5,
    page: 1,
    limit: 50,
    order: 'date_updated',
    order_dir: 'DESC'
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "tickets": [
      {
        "id": 123,
        "subject": "Fix login bug",
        "project_id": 5,
        "handlers": [ { "id": 7, "display_name": "Dana" } ],
        "handlers_uid": "|7|",
        "is_completed": 0,
        "scheduled_date": "2026-07-15 14:30:00",
        "duration": 90
      }
    ],
    "projects": [ { "id": 5, "name": "Website Redesign" } ],
    "total_results": 1,
    "next_token": "…"
  }
}

Name	Type	Description
id required · body	int	Ticket id.

Any key (must have access to the ticket)

// Get ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/get', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456 })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "id": 456,
    "subject": "Fix login bug",
    "project_id": 5,
    "handlers": [ { "id": 7, "display_name": "Dana" } ],
    "is_completed": 0,
    "custom_filters": { "42": "101" },
    "comments": [],
    "subtasks_list": [],
    "share_url": "https://…"
  }
}

Name	Type	Description
subject required · body	string	Ticket title.
project_id optional · body	int	Target project (auto-selects first if omitted).
scheduled_date optional · body	string	Datetime in your timezone.
handlers_uid optional · body	array[int]	Handler user ids.
duration_limit optional · body	int	Time budget in minutes.
list_id optional · body	int	Kanban list to place it on.
type optional · body	enum	task (default) | lead.

Any key

• The response also carries ticket_id alongside ticket.id — ticket_id is a string, ticket.id is a number. Prefer ticket.id.

// Create a ticket in project 123
const response = await fetch('https://api.todo.work/api_integrations/tickets/add', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    subject: 'Fix login bug',
    project_id: 123,
    handlers_uid: [7, 12],
    scheduled_date: '2026-07-15 14:30',
    duration_limit: 240
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": true,
    "ticket_id": "988",
    "ticket": { "id": 988, "subject": "Fix login bug", "project_id": 123 }
  }
}

Name	Type	Description
id required · body	int	Ticket id.
field required · body	string	subject | scheduled_date | handlers | is_completed | project_id | duration_limit | custom_field.
value required · body	mixed	Format depends on field (see notes). handlers = array of { id }. Must be present — omitting the key is an error, not an empty value.
custom_field_id optional · body	int	Required when field = "custom_field" (see Custom Fields).

Any key (edit access to the ticket’s project)

• is_completed accepts true/false, 1/0 and the strings "1"/"0"/"true"/"false". Anything else is rejected with a message rather than being coerced.
• A bare { "response": false } means one thing only: nothing changed, because the value sent already equals the stored one. Every rejection answers { "status": false, "error": "…" } instead, so an idempotent re-run is distinguishable from a refusal.
• Sending an id that does not exist answers { "status": false, "error": "Ticket not found" }.

// Set the handlers of ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    id: 456,
    field: 'handlers',
    value: [{ id: 7 }, { id: 12 }]
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": "success",
    "ticket": { "id": 456, "handlers": [ { "id": 7 }, { "id": 12 } ] }
  }
}

Name	Type	Description
parent_id required · body	int	Parent ticket id.
subject required · body	string	Subtask title.
handlers_uid optional · body	array[int]	Handler user ids.

Any key (access to the parent ticket)

// Add a subtask to ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/create_subtask', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    parent_id: 456,
    subject: 'Test the login page',
    handlers_uid: [8]
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": { "status": true, "ticket": { "id": 991, "parent_id": 456 } }
}

Name	Type	Description
tid required · body	int	Ticket id.
handler_id required · body	int	User id to add.

Any key (edit access)

// Add handler 7 to ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/add_handler', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ tid: 456, handler_id: 7 })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": "success",
    "ticket": { "id": 456, "handlers_uid": "|7|", "handlers": [ { "id": 7, "display_name": "Dana" } ] }
  }
}

Name	Type	Description
tid required · body	int	Ticket id.
handler_id required · body	int	User id to remove.

Any key (edit access)

// Remove handler 7 from ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/remove_handler', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ tid: 456, handler_id: 7 })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": "success",
    "ticket": { "id": 456, "handlers_uid": "||", "handlers": [] }
  }
}

Name	Type	Description
tid required · body	int	Ticket id.
handler_uid optional · body	int	Defaults to the acting user.
confirmed optional · body	bool	true to skip the threshold confirmation.

Any key (acting user must be a team member)

// Start the timer on ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/start_handling', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ tid: 456, confirmed: false })
});

const data = await response.json();
console.log(data.response);

// true on start, or the string "confirm" when a threshold needs confirmation:
{ "response": true }

Name	Type	Description
tid required · body	int	Ticket id.

Any key (acting user must be a team member)

// Stop the timer on ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/stop_handling', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ tid: 456 })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
tid required · body	int	Ticket id.
duration required · body	int	Minutes worked (> 0).
handler_uid optional · body	int	Defaults to the acting user.
date optional · body	string	Work datetime in your timezone (defaults to now).

Any key (acting user must be a team member)

// Log 2 hours on ticket 456
const response = await fetch('https://api.todo.work/api_integrations/tickets/report_duration', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    tid: 456,
    duration: 120,
    handler_uid: 7,
    date: '2026-06-27 14:00'
  })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
content optional · body	string	The note. Plain text is fine — line breaks are kept. Aliases: message, note, body, description…
subject optional · body	string	Board title. Defaults to the contact name / company / phone / email.
contact_name optional · body	string	Person’s name. Aliases: name, full_name, first_name + last_name.
phone optional · body	string	Aliases: mobile, tel, telephone, whatsapp…
email optional · body	string	Aliases: mail, email_address.
company optional · body	string	Aliases: company_name, organization, business.
source optional · body	string	Lead source — option name or id.
status optional · body	string	Lead status — option name or id. Defaults to the workspace default.
handlers_uid optional · body	array[int]	Assign to these users. Accepts [7], [{id:7}] or "7,12".
project_id optional · body	int	Optional — leads normally live outside projects.
scheduled_date optional · body	string	Follow-up datetime in your timezone.
fields optional · body	object	Any other custom field: { "<system_key | id | name>": value }.
append_unmapped optional · body	bool	Append unrecognised payload keys to the note. Default true.

Any key with leads.manage (admins always)

• Requires the workspace to have lead statuses configured. If it does not, the call is refused with a message — open the Leads screen in the TODO app once to create the defaults, then retry.

// Website form → lead + note, in one call
const response = await fetch('https://api.todo.work/api_integrations/add_lead', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    name: 'Israel Israeli',
    phone: '050-1234567',
    email: 'israel@example.com',
    company: 'Acme Ltd.',
    source: 'טופס אתר',
    message: 'Interested in the large package.\nBudget around 5,000.',
    utm_campaign: 'summer-2026'
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": 200,
    "message": "Lead created",
    "response": {
      "lead_id": 76924,
      "subject": "Israel Israeli",
      "comment_id": 92933,
      "fields_set": {
        "lead_contact_name": "Israel Israeli",
        "lead_phone": "050-1234567",
        "lead_email": "israel@example.com",
        "lead_company": "Acme Ltd.",
        "lead_source": "549"
      },
      "warnings": [],
      "lead": { "id": 76924, "type": "lead", "subject": "Israel Israeli" }
    }
  }
}

Name	Type	Description
target optional · query	enum	task (default) | lead | expense. Note: expense currently returns 0 fields.
project_id optional · query	int	Restrict to fields available on this project.

Any key

• Select fields return their options twice: values as full objects, and selectValues as { key, val } pairs. They carry the same options in two shapes.
• On user_approval fields the selectValues key is a state string such as "idle", not an option id.

// List custom field definitions
const response = await fetch('https://api.todo.work/api_integrations/filters/get_all', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": [
    {
      "id": 42,
      "name": "Status",
      "type": "select",
      "values": [
        { "id": 101, "name": "Open" },
        { "id": 102, "name": "In progress" },
        { "id": 103, "name": "Done" }
      ],
      "selectValues": [
        { "key": "101", "val": "Open" },
        { "key": "102", "val": "In progress" }
      ]
    },
    { "id": 43, "name": "Due date", "type": "date" },
    { "id": 44, "name": "Notes", "type": "free_text" }
  ]
}

Name	Type	Description
id required · body	int	Ticket id.
field required · body	string	Must be the literal "custom_field".
custom_field_id required · body	int	The field id from /filters/get_all.
value required · body	mixed	Per type (see below). null clears the value.

Any key (edit access to the ticket)

// Each field type takes its own value format.
// Use field: 'custom_field' and custom_field_id to target the field.

// SELECT — value is the option id
await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456, field: 'custom_field', custom_field_id: 42, value: 101 })
});

// DATE — value is 'YYYY-MM-DD'
await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456, field: 'custom_field', custom_field_id: 43, value: '2026-03-15' })
});

// TEXT / FREE_TEXT — value is any string
await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456, field: 'custom_field', custom_field_id: 44, value: 'Any text' })
});

// USERS_LIST — value is an array of user ids
await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456, field: 'custom_field', custom_field_id: 45, value: [1, 2, 3] })
});

// USER_APPROVAL — value is 'idle' | 'pending' | 'approved' | 'rejected'
await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456, field: 'custom_field', custom_field_id: 46, value: 'approved' })
});

// SWITCH — value is '1' (on) or '0' (off)
await fetch('https://api.todo.work/api_integrations/tickets/update', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 456, field: 'custom_field', custom_field_id: 47, value: '1' })
});

console.log('Custom field examples — copy and adapt as needed');

{
  "response": {
    "status": "success",
    "ticket": { "id": 456, "custom_filters": { "42": "101" } }
  }
}

No parameters — send the authentication headers only.

Any key (respects the acting user’s access)

// List clients
const response = await fetch('https://api.todo.work/api_integrations/get_clients', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": [
    { "id": 5, "name": "Acme Inc.", "phone": "03-1234567", "email": "hi@acme.com" }
  ]
}

Name	Type	Description
tid required · body	int	Ticket (or expense) id.
content required · body	string	HTML text (a safe tag subset is allowed).
object_type optional · body	enum	ticket (default) | expense.
mentions optional · body	string	Comma-separated user ids, e.g. "5,12".
reply_to optional · body	int	Parent comment id for a reply.
comment_id optional · body	int	Send to edit an existing comment.

Any key (access to the ticket/expense; edits are author or admin only)

// Comment on ticket 456 and mention two users
const response = await fetch('https://api.todo.work/api_integrations/comments/add_comment', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    tid: 456,
    object_type: 'ticket',
    content: '<p>Fixed the alignment.</p>',
    mentions: '5,12',
    reply_to: 0
  })
});

const data = await response.json();
console.log(data.response);

{ "response": { "success": true, "comment_id": 4567 } }

No parameters — send the authentication headers only.

Any key (results filtered by the key’s permission level)

// List platform users
const response = await fetch('https://api.todo.work/api_integrations/get_users', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": 200,
    "message": "Users fetched successfully",
    "response": [
      { "id": 7, "display_name": "Dana", "type": "user", "token": "…" }
    ]
  }
}

Name	Type	Description
project_id required · query	int	Project id.
exclude_user_id optional · query	int	A user to leave out (e.g. yourself).

Any key

// Senior members of project 123
const response = await fetch('https://api.todo.work/api_integrations/get_project_senior_members?project_id=123&exclude_user_id=7', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": 200,
    "message": "Senior members fetched successfully",
    "response": [
      { "id": 3, "display_name": "Denis", "permission": 1, "pic_parsed": "https://…" }
    ]
  }
}

Name	Type	Description
project_id required · formdata	int	Target project.
description required · formdata	string	Brief text.
reference_files[] optional · formdata	file[]	Reference images.
material_files[] optional · formdata	file[]	Working-material files.

Any key (scoped to the platform)

// Add a brief to a project (multipart/form-data — no Content-Type header)
const formData = new FormData();
formData.append('project_id', 123);
formData.append('description', 'Brief description');
// formData.append('reference_files[]', file1);
// formData.append('material_files[]', file2);

const response = await fetch('https://api.todo.work/api_integrations/add_files', {
  method: 'POST',
  headers: {
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: formData
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
project_id required · body	int	Target project.
user_id optional · body	int	User to attach (omit to only rename).
rename optional · body	bool	Default true. Send false to attach the user without touching the project name.

Any key (scoped to the platform)

• The rename writes the project name as "<id> - <name>". It is applied at most once — calling repeatedly no longer stacks the prefix.
• Send rename: false if you only want to attach the user.

// Attach user 7 to project 123
const response = await fetch('https://api.todo.work/api_integrations/attach_users', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ project_id: 123, user_id: 7 })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
limit optional · query	int	Default 50.
offset optional · query	int	Default 0.

Any key

// List conversations
const response = await fetch('https://api.todo.work/api_integrations/chat/get_conversations?limit=50&offset=0', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": true,
    "conversations": [
      { "id": 5, "type": "private", "name": "Dana", "unread_count": 2, "last_message": { } }
    ],
    "has_more": false
  }
}

Name	Type	Description
conversation_id required · query	int	Conversation id.
before_id optional · query	int	Cursor: fetch messages older than this id.
limit optional · query	int	Default 50.

Any key (participant)

// Get the latest messages of conversation 5
const response = await fetch('https://api.todo.work/api_integrations/chat/get_messages?conversation_id=5&limit=50', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": true,
    "messages": [
      { "id": 900, "content": "Hi!", "message_type": "text", "sender": { "id": 7, "display_name": "Dana" } }
    ],
    "has_more": true
  }
}

Name	Type	Description
search optional · query	string	Case-insensitive match on display name.
limit optional · query	int	Default 50.

Any key

// List users you can chat with
const response = await fetch('https://api.todo.work/api_integrations/chat/get_visible_users?limit=50', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": true,
    "users": [ { "id": 7, "display_name": "Dana", "type": "user" } ]
  }
}

Name	Type	Description
user_id required · body	int	The other user (must be visible to you).

Any key

// Open a chat with user 7
const response = await fetch('https://api.todo.work/api_integrations/chat/get_or_create_private', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ user_id: 7 })
});

const data = await response.json();
console.log(data.response);

{
  "response": { "status": true, "conversation": { "id": 5, "type": "private" }, "created": false }
}

Name	Type	Description
name required · body	string	Group name.
participants optional · body	array[int]	User ids to add.
image optional · body	string	Storage id of a group image.

Any key

// Create a group with three members
const response = await fetch('https://api.todo.work/api_integrations/chat/create_group', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    name: 'New project',
    participants: [5, 12, 18]
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": true,
    "conversation": { "id": 200, "type": "group", "name": "New project", "my_role": "admin" }
  }
}

Name	Type	Description
conversation_id required · body	int	Target conversation.
content required · body	string	Message text (mention syntax supported).
reply_to_id optional · body	int	Message being replied to.
temp_id optional · body	string	Client id echoed back for optimistic UI.

Any key (participant)

// Send a message with a mention
const response = await fetch('https://api.todo.work/api_integrations/chat/send_message', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({
    conversation_id: 5,
    content: 'Hi @[Dana](7), see #[Ticket](456)',
    temp_id: 'client_123'
  })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "status": true,
    "message": { "id": 901, "content": "Hi @Dana, see #Ticket", "message_type": "text" }
  }
}

Name	Type	Description
conversation_id required · body	int	Conversation id.

Any key (participant)

// Mark conversation 5 read
const response = await fetch('https://api.todo.work/api_integrations/chat/mark_read', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ conversation_id: 5 })
});

const data = await response.json();
console.log(data.response);

{ "response": { "status": true } }

Name	Type	Description
id optional · body	int	A specific board id.
limit optional · body	int	Default 50.
page optional · body	int	0-indexed; page 0 includes the total count.

Any key

// List my boards
const response = await fetch('https://api.todo.work/api_integrations/kanban/boards', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ limit: 10, page: 0 })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "items": [ { "id": 42, "name": "Daily — Dana", "color": "#59ce8f", "users": [] } ],
    "num": 1
  }
}

Name	Type	Description
kanban_id required · body	int	Board id.
limit optional · body	int	Default 50.
page optional · body	int	0-indexed.

Any key (board access)

// List the columns of board 42
const response = await fetch('https://api.todo.work/api_integrations/kanban/lists', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ kanban_id: 42, page: 0 })
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "items": [ { "id": 101, "kanban_id": 42, "name": "To do", "ord": 0, "tickets": [] } ],
    "num": 1
  }
}

Name	Type	Description
kanban_id required · body	int	Board id.

Any key (board access)

// Get the cards on board 42
const response = await fetch('https://api.todo.work/api_integrations/kanban/get_tickets', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ kanban_id: 42 })
});

const data = await response.json();
console.log(data.response);

{ "response": [ { "id": 789, "list_id": 101, "ord": 0, "project_id": 5 } ] }

Name	Type	Description
name required · body	string	Board name.
share_user_id optional · body	int	Share the board with this user.

Any key

// Create a shared board
const response = await fetch('https://api.todo.work/api_integrations/kanban/add_board', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ name: 'Daily — Dana', share_user_id: 7 })
});

const data = await response.json();
console.log(data.response);

{ "response": { "board": { "id": 43, "name": "Daily — Dana" } } }

Name	Type	Description
kanban_id required · body	int	Board id.
name required · body	string	List name.
id optional · body	int	Send to update an existing list.
project_id optional · body	int	Link the column to a project (auto-populated).

Any key (board access)

// Add a column to board 42
const response = await fetch('https://api.todo.work/api_integrations/kanban/add_list', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ kanban_id: 42, name: 'June 27 — Thursday' })
});

const data = await response.json();
console.log(data.response);

{ "response": { "list": { "id": 102, "kanban_id": 42, "name": "June 27 — Thursday" } } }

Name	Type	Description
ticket_id required · body	int	Ticket id.
list_id required · body	int	Target list id.

Any key (board access)

// Move a card onto a list
const response = await fetch('https://api.todo.work/api_integrations/kanban/move_ticket', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ ticket_id: 789, list_id: 102 })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
ticket_id required · body	int	Ticket id.
list_id required · body	int	List id.

Any key (board access)

// Remove a card from a list
const response = await fetch('https://api.todo.work/api_integrations/kanban/remove_ticket', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ ticket_id: 789, list_id: 102 })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
id required · body	int	List id.

Any key (board access)

// Delete a column
const response = await fetch('https://api.todo.work/api_integrations/kanban/remove_list', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 102 })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
id required · body	int	Board id.

Any key (board ownership)

// Delete a board
const response = await fetch('https://api.todo.work/api_integrations/kanban/remove_board', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ id: 42 })
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
user_a required · body	int	First user id.
user_b required · body	int	Second user id.

Admin key only

// Find the board shared between two users
const response = await fetch('https://api.todo.work/api_integrations/kanban/find_shared_board', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: JSON.stringify({ user_a: 5, user_b: 12 })
});

const data = await response.json();
console.log(data.response);

{ "response": { "id": 42, "name": "Daily — Dana", "users": [] } }
// or { "response": false } when none exists

No parameters — send the authentication headers only.

Admin key only

// Who is currently clocked in
const response = await fetch('https://api.todo.work/api_integrations/tracking/get_active_shifts', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": [ { "user_id": 7, "date_start": "2026-06-27T08:02:00Z", "absence_type": null } ]
}

No parameters — send the authentication headers only.

Admin key only

// Who is currently working a ticket
const response = await fetch('https://api.todo.work/api_integrations/tracking/get_active_handlings', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": [ { "handler_uid": 7, "tid": 123, "due_date": "2026-06-27T10:15:00Z" } ]
}

Name	Type	Description
date optional · query	string	Y-m-d (defaults to today).

Admin key only

// Work logged today
const response = await fetch('https://api.todo.work/api_integrations/tracking/get_today_handlings?date=2026-06-27', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": [ { "handler_uid": 7, "tid": 123, "duration": 45, "ended_at": "2026-06-27T11:00:00Z" } ]
}

Name	Type	Description
user_id required · query	int	Whose calls to fetch.
from_date optional · query	string	Inclusive lower bound (Y-m-d).
limit optional · query	int	Default 100, max 200.

Any key

// Recent call transcripts for user 7
const response = await fetch('https://api.todo.work/api_integrations/voice/get_calls_for_user?user_id=7&from_date=2026-06-01&limit=50', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "calls": [
      {
        "call_id": "call_abc",
        "initiator_id": 7,
        "participants": [7, 12],
        "started_at": "2026-06-27T09:00:00Z",
        "duration_seconds": 83,
        "summary": "…",
        "full_text": "…"
      }
    ]
  }
}

Name	Type	Description
user_id required · query	int	The user.
date optional · query	string	Y-m-d (defaults to today).

Any key

• user_id is genuinely required — without it the endpoint answers a bare false.
• The response carries about 26 fields; the common ones are shown below. It also includes target / target_type, which are aliases of daily_target / daily_target_type.

// Daily target progress for user 7
const response = await fetch('https://api.todo.work/api_integrations/panels/daily_target_for_user?user_id=7&date=2026-06-27', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "user_id": 7,
    "display_name": "Dana",
    "date": "2026-06-27",
    "daily_target": 8,
    "daily_target_type": "hours",
    "perc": 62.5,
    "ttl_hours_parsed": "05:00"
  }
}

Name	Type	Description
project_id required · query	int	Project to scope media to.
limit optional · query	int	Default 50.
page optional · query	int	0-indexed; page 0 includes the total count.
q optional · query	string	Free-text filter on the file name and the owning ticket subject.

Any key

• project_id is required — calling without it answers 400.
• Deleting requires POST; a GET to /media_gallery/delete is refused with 405.

// List media in project 123
const response = await fetch('https://api.todo.work/api_integrations/media_gallery/results?project_id=123&limit=10&page=0', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{
  "response": {
    "num": 1,
    "items": [
      {
        "id": 5,
        "name": "logo.png",
        "url": "https://…",
        "type": "image",
        "project_id": 123,
        "ticket_id": false,
        "subject": false,
        "date_created": false
      }
    ]
  }
}

Name	Type	Description
project_id required · formdata	int	Target project.
files required · formdata	file[]	The files to upload.

Any key (needs project access)

// Upload media (multipart/form-data — no Content-Type header)
const formData = new FormData();
formData.append('project_id', 123);
// formData.append('files[]', file1);

const response = await fetch('https://api.todo.work/api_integrations/media_gallery/upload', {
  method: 'POST',
  headers: {
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  },
  body: formData
});

const data = await response.json();
console.log(data.response);

{ "response": true }

Name	Type	Description
media_id required · query	int	The storage id to delete.

Any key (needs project access)

// Delete a media file
const response = await fetch('https://api.todo.work/api_integrations/media_gallery/delete?media_id=5', {
  method: 'GET',
  headers: {
    'Content-Type': 'application/json',
    'X-API-KEY': 'YOUR_API_KEY',
    'X-API-SECRET': 'YOUR_API_SECRET'
  }
});

const data = await response.json();
console.log(data.response);

{ "response": { "success": true } }
// or { "response": { "success": false, "message": "Media item not found" } }