API tokens and webhooks
Read-only personal tokens, brand webhooks with signed deliveries, and the funnel resolve API.
Personal API tokens
From account settings you can create read-only tokens (optionally scoped to one brand, with an expiry). They give GET access to your campaigns, applications, collaborations and licences. A token is shown once; revoke it at any time. Writes through the API are not offered yet.
Webhooks
A brand can register HTTPS endpoints and subscribe to events: campaign published, application submitted, agreement created, collaboration completed, licence expiring. Each delivery is signed (X-ProvenReel-Signature: t=…,v1=…, HMAC-SHA256 of the timestamp and body with your secret) and retried at 1, 5, 30, 120 and 720 minutes before being marked exhausted. The delivery log, a test ping, pause and secret rotation are on the webhooks page.
Payloads carry identifiers, display names and agreed totals only.
Funnel resolve API
For brand-domain links: your funnel calls a signed resolve endpoint to turn a vanity slug into an attribution reference before the store, and reports conversions through a signed events feed. The contract, headers and secret rotation are on the integrations page.
Still unsure? Write to a person on the help page.