What is the Holded API?

The Holded API (Application Programming Interface) allows you to connect your account with other applications to automatically exchange information.

It is the system that enables different programs to work together and share data in a structured way.

For example, you can:

Create contacts from another CRM.
Generate invoices from an e-commerce platform.
Sync products or stock.

The API works through requests that allow you to:

Retrieve information (GET)
Create data (POST)
Update data (PUT)
Delete data (DELETE)

These actions are performed through a specific endpoint (the URL that defines the operation). For example:

https://api.holded.com/api/v2/invoices

Although Holded provides native integrations with various applications, if you need custom automation you can use the API to connect Holded with any other software your company uses.

Who can use the API?

The API is available on all paid plans. It is not available on the Free plan.

To generate an API Key, you must:

Have an active plan other than Free.
Have access to the Developers section.

☝🏼 You can grant access to users with the developer role, or with a custom role with access to the Developers section so they can access and edit the API.

How to generate an API Key

An API Key is the key that identifies your Holded account in each request. It must be included in all API calls to indicate which account the operation belongs to. To generate one, follow these steps:

Go to your account (top left) and click on Settings.
In the Developers section, click on Credentials.
Click Add API Token.
You will be able to select what permissions that API Key has. ☝🏼 If you need to access the v1 API you can do so via the Go to Api Keys v1 banner.
Click Create Token. An alphanumeric code will be generated that you can copy.

⚠️ The API Key is private. You must not share it or make it public.

Can multiple API Tokens be created?

Yes, you can create as many API Tokens as you need.

How to access the API documentation

Once the API Key has been generated, you can check the technical documentation to learn about the available endpoints and actions.

To access it:

Go to Menu > Settings.
Click on Developers > Credentials.
Click on </> API Documentation.

From there you can consult:

Available endpoints across the different Holded modules: Sales, Inventory, Accounting, Treasury, Contacts, CRM, Projects.
Required parameters.
Call examples.
Responses and error codes.

How to test the API before integrating it

Before implementing a full integration, it is recommended to test the API to ensure the required actions work correctly.

You can test it using:

The interactive API documentation.
External tools such as Postman.

Testing with Postman

Postman is a testing tool that allows you to send requests to the API and check how it works before integrating it into a final development.

To test it:

Download and install the Postman application.
Select the corresponding method (GET, POST, PUT or DELETE).
Enter the endpoint you want to use.
In the Authorization section, add:
- Auth Type > Bearer Token
- Token > API Token generated in Holded.
Add the required parameters in the Body.
Send the request and review the response.

If everything works correctly, you will be able to carry out the final integration in your system.

Frequently Asked Questions about the Holded API

Is there a limit on API calls?

According to the commercial terms, there is a monthly limit depending on the contracted plan. You can review the limits here: https://www.holded.com/es/desarrolladores/limite-de-tasa .

Does the API follow my user role permissions?

No. The API Key does not inherit permissions based on the user role. It is possible to limit the API to certain actions, since when creating the API Token, you can choose whether the API access to those modules will be write, read or full access.

Any person who has access to the API Key will be able to access, via the API, all endpoints available for that account according to the documentation.

For this reason, it is important not to share the API Key and to limit access to it only to trusted people or systems.