Your setter team,
programmable.

Overview#

One API key unlocks two surfaces backed by the exact same operations, so behavior never drifts between them:

Quickstart#

1. In the app, open Settings → API & MCP → Create key, pick scopes, copy the sm_live_… key (shown once). 2. Say hello:

curl https://api.salesmomenta.com/v1/me \
  -H "Authorization: Bearer sm_live_YOUR_KEY"

{
  "ok": true,
  "name": "Coach Ava",
  "instagram": "coachava.fit",
  "pipeline_stages": ["New", "Qualified", "Engaged", "Call Booked", "Showed", "Closed", "Lost"],
  "counts": { "leads": 28, "conversations": 28, "awaiting_reply": 3 },
  "key": { "name": "Production agent", "scopes": ["leads:read", "…"] }
}

3. Or skip REST entirely and hand the whole workspace to your coding agent — see the MCP server.

Authentication & scopes#

Every request carries Authorization: Bearer sm_live_…. Keys are hashed at rest, revocable instantly, and scoped — a key can read the pipeline without being able to message anyone. A missing scope returns 403 missing_scope naming exactly what's needed.

The MCP server#

Sales Momenta speaks the Model Context Protocol natively — protocol 2025-06-18 over Streamable HTTP, stateless, authenticated with the same API keys. Point any MCP client at https://api.salesmomenta.com/mcp:

claude mcp add --transport http momenta https://api.salesmomenta.com/mcp \
  --header "Authorization: Bearer sm_live_YOUR_KEY"

{
  "mcpServers": {
    "momenta": {
      "url": "https://api.salesmomenta.com/mcp",
      "headers": { "Authorization": "Bearer sm_live_YOUR_KEY" }
    }
  }
}

curl https://api.salesmomenta.com/mcp \
  -H "Authorization: Bearer sm_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
       "params":{"name":"list_conversations","arguments":{"state":"our_move"}}}'

Tool catalog

REST · Workspace#

REST · Leads#

{ "ig_username": "@maya.fit", "first_name": "Maya", "temperature": "warm" }

{ "stage": "Qualified", "temperature": "hot" }

REST · Conversations & messaging#

{ "text": "Hey! Circling back on this — how did the week of training go?" }

REST · AI suggestions#

{ "ok": true, "suggestions": [
  { "text": "okay so what's actually getting in the way...", "angle": "question-first" },
  { "text": "haha fair enough. real talk though...",          "angle": "mirror-tone" },
  { "text": "let's just get you on a quick call...",          "angle": "push-to-call" }
] }

REST · Voice notes#

{ "text": "Yo! Just heard your last message — love the energy. Let's lock that call in.",
  "voice_profile_id": "optional — defaults to the workspace's default voice" }

REST · Pipeline · Team · Analytics#

Webhooks#

Register an HTTPS endpoint and we POST signed JSON as things happen — including changes made by humans inside the app.

{
  "id": "f4a1…", "event": "lead.stage_changed", "created_at": "2026-08-24T02:41:00Z",
  "workspace_id": "…",
  "data": { "lead_id": "…", "name": "Maya Torres", "from_stage": "Qualified", "to_stage": "Call Booked" }
}

Verify the signature

Every delivery carries sm-signature — HMAC-SHA256 of the raw body with your endpoint's secret (shown once at creation) — plus sm-event.

import crypto from 'node:crypto';

function verify(rawBody, header, secret) {
  const expected = crypto.createHmac('sha256', secret).update(rawBody).digest('hex');
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(header));
}

Endpoints that fail 20 deliveries in a row are switched off (visible in Settings) instead of hammered forever. 2xx within 5 seconds counts as delivered.

Errors#

{ "ok": false, "error": {
    "code": "missing_scope",
    "message": "This key doesn't have the \"messages:send\" scope. …",
    "docs": "https://salesmomenta.com/developers#errors" } }

Rate limits#

120 requests/minute per key (token bucket — short bursts are fine). Every response carries X-RateLimit-Limit and X-RateLimit-Remaining; a 429 includes Retry-After seconds. Instagram-side send caps (per-hour/per-day, configured per workspace) are enforced independently of API rate limits.

OpenAPI & llms.txt#

Machine-readable everything:

Questions or a scope you need that isn't here? Tell us from inside the app — the platform grows with what you build.