Bearer keys, prefixed ULIDs, cursor pagination, idempotency on every mutation, signed webhooks. Learn it once for SK Works; it holds across all of Softknack.
Projects reference deals and contacts by ID; milestone events are the hooks your automations want. Reaching a milestone can draft an invoice in SK Billing — one event, two products in step.
Get a test key, make one authenticated call, and listen for the webhook. The same three moves work for every endpoint in the suite.
Test and live keys are separate environments. Build against sk_test_ without touching a real customer.
One authenticated POST with an idempotency key. Same key + same body always returns the same result.
A signed project.created event hits your endpoint — verify the HMAC, act on it, return 200.
curl -X POST https://api.softknack.com/works/v1/projects \ -H "Authorization: Bearer sk_live_..." \ -H "Idempotency-Key: 9f2c-4d1a-...-e7b3" \ -H "Content-Type: application/json" \ -d '{ "deal_id": "dl_01J9X...", "name": "Site fit-out", "owner_id": "usr_01J9X...", "template": "fitout_v2" }'
Signed with HMAC-SHA256, delivered at-least-once, retried on a fixed schedule, and replayable from a dead-letter queue. You will never miss an event because a deploy was mid-flight.
| Event | When it fires |
|---|---|
project.created | Opened — from a won deal or directly. |
task.completed | Done, by whom, when; queues update live. |
milestone.reached | Phase complete — billing triggers and notifications fire. |
project.closed | Delivered; the timeline tells the story. |
task.assigned | Landed in someone's queue. |
task.overdue | Past its due date. |
The platform conventions every SK product obeys — learn them once, rely on them everywhere.
Every mutation takes an Idempotency-Key. Same key + body returns the original result; a conflicting body gets 409.
Sortable, debuggable IDs like prj_01J9X... — you can read the type and the time right off the wire.
Stable cursors that never skip or repeat a row when data changes mid-list. No page-offset drift.
Isolation enforced in the database. 404-over-403, so the existence of another tenant's record never leaks.
HMAC-SHA256 on every delivery, with the full retry schedule and dead-letter replay above.
The OpenAPI spec is generated from the code's validators and checked in CI — the docs can't lie.
Open projects from your own CRM events over REST, or template repeatable delivery. Subscribe to milestone.reached to trigger billing and notifications, or expose project actions to your agents over MCP so an AI can scaffold delivery from a won deal.
Pull a person's open tasks, or a project's milestone status, in a single API call — the same data that powers the live queues your team works from.
Auth, errors, pagination, every endpoint and schema — written once for the platform, shared by every product.
docs.softknack.com/works See pricing →