Corevia exposes a token-authenticated REST API so your website, store or automation tools can read and write data.
First mint a token: sign in, open Settings → API, and create one. The token is shown once — copy it immediately and store it somewhere safe. It inherits the permissions of the user who created it, so create it under an account that has exactly the access the integration needs, and no more.
Send the token as a bearer header on every request:
Authorization: Bearer aeadf_your_token_here
Requests go to your own workspace host, so the tenant is identified by the address you call. A good first call is the ping endpoint, which confirms the token works before you build anything on top of it.
From there you can list customers, products and invoices, create leads from your website's contact form, raise draft purchase orders, and send invoices through the ERP's own outbox. If a token is ever exposed, revoke it on the same Settings page — revocation takes effect immediately.