GraphQL · API keys · Webhooks
The API the app itself runs on. Open to you.
Everything a person does in docket, they do through this API: booking time, creating tickets, reading invoices. With a personal key your scripts and automations do the same, and webhooks tell them when something happens.
Included in the price. An admin switches the API on for the workspace.
Signing in, and what a key may do.
POST https://yourworkspace.docket.rocks/graphql
Authorization: Bearer dkt_…
Content-Type: application/json
{ "query": "{ viewer { id firstname role } }" }
A key is a person.
Everyone creates their own keys in their profile. A key sees and may do what its owner's role may in the app, nothing more: a time tracker's key sees their time, a project manager's key reads invoices too.
What no key can do.
Workspace settings, users and roles, the connections to Jira and AI apps, and keys and webhooks themselves are changed only signed in to the app. A lost key can book time, but can't make itself an admin.
Webhooks instead of asking.
docket sends your address a signed event when an invoice is issued or paid, a ticket is created or time is booked. n8n, Make and Zapier take it with their webhook nodes.
For your own integrations: the key, not the password.
The web app and the Mac app sign in with e-mail, password and second factor. That way belongs to docket's own programs and may change. Build your integration on API keys: each can be deleted on its own, and nobody has to write a password into a script.
The reference, straight from the schema.
The 84 queries and 151 mutations a key can call, with what they do, who may call them, their arguments and an example call with its answer, plus every object they return. In the docs, with a list of names to filter.
Short questions, short answers.
Is there a REST API too?
No, GraphQL only. Every automation tool with an HTTP node can call it: a call is a POST with a JSON body. The guide has the common calls to copy.
Does the API cost extra?
No. API keys and webhooks are part of every workspace. An admin switches the API on, then everyone creates their own keys.
How many requests are allowed?
120 requests a minute per key. Above that docket answers with status 429, and you try again after a pause.
Will the API stay stable?
It is the app's own API and grows with it. A field that goes away is marked as deprecated in the schema first. There is no version number.
Can we test safely?
Yes, in a test workspace of your own: the 14 free days are enough to build your automation against real answers. Webhooks can be fired with a test event from the app.
Is there a ready-made app for Zapier, Make or n8n?
Not yet. All three connect through their generic nodes: a webhook trigger for events and an HTTP or GraphQL node for calls.
Your tools. Connected to docket.
Try it free for 14 daysNo card. With examples: the API guide in the help. Questions first? info@docket.rocks.
