Integrations - SMB Sales Boost API

SMB Sales Boost can stream events to your CRM, automation tools, and any HTTPS endpoint. Configure destinations from the Integrations tab in your dashboard, or manage them programmatically with the endpoints below. Integration management endpoints are mounted directly under /api (not /api/v1) and require an active paid plan with a session cookie or API key.

Supported providers

HubSpot: Per-user OAuth, upserts Contacts and Companies (Coming Soon)
Salesforce: Per-user OAuth, upserts Leads in Production or Sandbox (Coming Soon)
Pipedrive: Per-user OAuth, upserts Persons and Organizations; per-company API domain handled automatically (Coming Soon)
Zapier: Webhook trigger URL with HMAC signature (Live)
n8n: Webhook node with HMAC signature (Live)
Make.com: Custom webhook trigger with HMAC signature (Live)
Pipedream: HTTP source workflow with HMAC signature (Live)
Clay: Clay table "Import data" webhook with HMAC-signed JSON rows (Live)
Generic Webhook: Any HTTPS endpoint, signed JSON payload (Live)

Events

Subscribe destinations to one or more of these events. Each event arrives as a signed JSON POST.

lead.created - new leads exported (sample of 5 included).
lead.updated - existing leads with refreshed data (currently emitted alongside export.completed).
export.completed - export run finished.
email_schedule.sent - a scheduled email batch was delivered.
credit.low_balance - remaining credits dropped under the alert threshold.

Verifying signatures

Every webhook delivery includes X-SMB-Signature: t=<timestamp>,v1=<hex>. Compute HMAC-SHA256(secret, "<timestamp>." + rawBody) and compare to v1 using a timing-safe comparison.

// Node.js
const crypto = require("crypto");
const expected = crypto
  .createHmac("sha256", process.env.SIGNING_SECRET)
  .update(`${timestamp}.${rawBody}`)
  .digest("hex");
if (!crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1))) {
  throw new Error("Bad signature");
}

Endpoints

Method	Path	Description
`GET`	`/api/integrations/providers`	List providers and runtime availability
`GET`	`/api/integrations`	List the caller's integrations and subscriptions
`GET`	`/api/integrations/:id`	Single integration with subscription detail
`POST`	`/api/integrations/webhook`	Create a webhook integration; returns one-time signing secret
`PATCH`	`/api/integrations/:id`	Update display name, status, or subscriptions
`DELETE`	`/api/integrations/:id`	Remove an integration
`GET`	`/api/integrations/:id/deliveries`	Last 50 delivery attempts
`POST`	`/api/integrations/:id/deliveries/:deliveryId/retry`	Re-attempt a failed delivery
`POST`	`/api/integrations/:id/test`	Fire a synthetic `lead.created` event
`POST`	`/api/integrations/:id/push-lead`	Push a single lead on demand
`GET`	`/api/integrations/hubspot/start`	Returns HubSpot OAuth URL and state
`GET`	`/api/integrations/hubspot/callback`	HubSpot OAuth callback; redirects back to dashboard
`GET`	`/api/integrations/salesforce/start`	Returns Salesforce OAuth URL and state (`?env=production\|sandbox`)
`GET`	`/api/integrations/salesforce/callback`	Salesforce OAuth callback; redirects back to dashboard
`GET`	`/api/integrations/pipedrive/start`	Returns Pipedrive OAuth URL and state
`GET`	`/api/integrations/pipedrive/callback`	Pipedrive OAuth callback; redirects back to dashboard

Create a webhook integration

curl -X POST https://smbsalesboost.com/api/integrations/webhook \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer smbk_your_api_key_here" \
  -d '{
    "provider": "zapier",
    "displayName": "My Zap",
    "targetUrl": "https://hooks.zapier.com/hooks/catch/XXX/YYY",
    "events": ["lead.created", "export.completed"]
  }'

The response includes signingSecret. Store it - it is shown only once.

API Documentation Sections

View Full API Documentation

Ready to Find Your Next Customers? Get access to newly registered business leads updated every 5 minutes. See plans starting at $49/mo →