Build on SuiteOp

Build on SuiteOp

The public REST API, OAuth 2.1 for user-delegated access, and the hosted MCP server that exposes the same operations to AI assistants.

Get StartedAPI Reference

Guides

Public — you do not need a SuiteOp account to read them.

Getting Started

Your region's base URL and a first authenticated request.

Authentication

API keys, bearer tokens, and how a key is scoped.

Errors

The error envelope, status codes, and what to retry.

Rate Limits

Per-key limits, the headers that report them, and backoff.

Idempotency

Making a retried write safe to send twice.

Pagination

Walking a list endpoint without missing or repeating rows.

Managing API Keys

Creating, scoping, and rotating keys from the dashboard.

OAuth 2.1

User-delegated access, PKCE, scopes, and consent.

Before your first request

The API is multi-region — US, EU and APAC each serve their own organizations, and a key only works against its own region. Both your region-correct base URL and your MCP endpoint are shown in the SuiteOp dashboard under Settings → Developer, which is also where API keys are created.

A key carries its own permissions and is scoped to a single organization. OAuth grants are narrower still: a token can never do more than the member who authorized it can currently do, so changing someone's permissions in the dashboard immediately narrows the tokens issued to them.

Getting StartedCreate an API Key