BoxHero API Reference

BoxHero API can be used for retrieving data from outside the app.


Request Example

curl -X 'GET' \
  '' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer test-api-token-123'


In the [Settings] - [Integrations & API] menu, you can issue a new API token. All API requests should have Authorization header as a Bearer {API token}.

Rate limits

We rate limit the API requests as follows.

  • 5 queries per second for each endpoint.

Once you are rate limited, the response will be an error message with the following additional information.

  • X-Ratelimit-Limit - Maximum queries per minute

  • X-Ratelimit-Remaining - Remaining queries

  • X-Ratelimit-Reset - Time to remaining query count reset (in seconds)



Any response with an HTTP status code within the 200 range means that the API is processed successfully.


A response with an HTTP status code in the 400 or 500 range means that the request failed to be processed.

  • 400 range: error due to information provided with the request (ex: missing a required parameter).

  • 500 range: error due to a problem associated with the server.

When an error occurs, expect the following response.

  "id": "ex_ku3gij67k9xzc8ef6r5esyu5",
  "type": "/errors/tokens/invalid",
  "title": "Authentication token is invalid. Please provide a valid token.",
  "correlation_id": "rq_z4g7dh55ykol7v2cx6homkpd",
  "given": "invalid-token-123"
  • id : A unique ID to identify the error.

  • type : A code in the form of a URL that identifies the type of error.

  • title : Provide the contents of the error in human-readable form.

  • correlation_id : Points to the ID of the request associated with the error.

  • others : Additional fields may be included to provide additional information, such as "given" in the example.

Common Error Types



Fires when the requested resource cannot be found (for example, an item with a specific ID does not exist).


There is an error in the parameters provided with the request. (The 'errors' field in the response will contain parameter-specific errors).


Fires when the requested query cannot be processed in the current team mode (for example, using the location lookup API in basic mode).


Fires when an API token is required to process the request but is not provided.


Fires if the API token provided is invalid (e.g., the API token has expired).


A request has exceeded the rate limit.


There was a server-side error that was not handled.


Cannot process request due to usage limit. Please upgrade your team's plan.

Error Report and Development Requests

If the API is not working as expected or you experience other difficulties, please send us an email with your response to the email address listed below.

Additionally, if you have any development requests regarding the API, please send us an email to the following:

Email :




Item Attributes



Transactions (Basic mode)

Transactions (Location mode)

Last updated