Grants

Usage & billing

Fair API usage within the published rate limits is included on every plan - the integration shouldn't feel artificially constrained just because you're on a smaller tier. Enterprise customers get bespoke limits on request.

On-demand service is available, and our developer team builds custom integrations on request - reach out if your use case needs more than the standard hookup.

Quick start

1. 1

   Create a token

   Open the Integrations menu in Grants, click *New token*, pick a name + scopes, and copy the pat_… secret. It's shown exactly once.

2. 2

   Make your first request

   Pass the token as a Bearer header to any Grants endpoint your scopes allow. Pagination, filtering, and sorting are documented per model.

   curlJavaScriptPython

   Copy

   curl -H "Authorization: Bearer pat_…" \
        https://granttool.de/xapi2/data/derived_doc

3. 3

   Subscribe to live updates

   Open a single WebSocket and receive every create / update / delete event in real time - same access rules, same token. Skip polling entirely.

   WebSocket

   Copy

   const ws = new WebSocket(`wss://${location.host}/xapi2/ch?token=${token}`)
   ws.onopen = () => ws.send(
     JSON.stringify({ op: "subscribe", id: "s1", dataType: "derived_doc" }),
   )
   ws.onmessage = (e) => console.log(JSON.parse(e.data))

Navigate

These docs cover every endpoint the app exposes. Each model page carries concrete code samples in curl, JavaScript, TypeScript, and WebSocket.

Data models

Production-grade, industry-standard data models. Every object is managed securely - validation, access rules, and audit run uniformly on every path - and the data is owned by the respective customer at all times. Export and deletion are first-class.