# RevenuePilot CRM API v1

## Overview

The CRM API uses bearer-token authentication and workspace scoping.

## Base

`/api/crm/v1`

## Endpoints

- `GET /status`
- `GET /schema`
- `GET /deals`
- `GET /leads`
- `GET /rate-limits`

## Authentication

Create an API client from the Enterprise Hub, then send:

`Authorization: Bearer <token>`

## Rate Limiting

Each API client has an hourly request limit. Responses expose:

- `X-RateLimit-Limit`
- `X-RateLimit-Remaining`

## Workspace Isolation

If the token belongs to a workspace-scoped API client, responses are limited to CRM records whose companies belong to that workspace.

## Schemas

Use `GET /schema` for the current payload contract and webhook-signing notes.