Programmatic access to your entire partnership data layer

All Alliantra API requests are authenticated using Bearer tokens issued from your workspace settings. API keys are scoped per environment (development, staging, production) and can be granted read-only or read-write permissions at the resource level.

For server-to-server integrations, use long-lived API keys stored securely in your environment. For user-facing integrations that access partner data on behalf of a team member, OAuth 2.0 authorization flow is supported with configurable scopes.

Push revenue events, partner activity, and attribution data directly into Alliantra from your internal systems. The ingestion API accepts structured JSON payloads representing individual events (conversions, registrations, transactions) or batched records for historical backfills.

Events are validated, normalized, and attributed to the correct partner based on the identifiers provided — then immediately reflected in dashboards and AI models.

Retrieve structured partner objects including performance scores, ROI metrics, revenue attribution, and AI-generated signals. Partner objects are the core entity in Alliantra — they aggregate all connected data from your integrated sources and present it through a normalized, queryable model.

Revenue events associated with each partner can be paginated and filtered by period, type, and attribution model to support custom reporting, reconciliation workflows, or warehouse export processes.

Access pre-computed report objects that mirror the dashboard views in the Alliantra UI. Reporting endpoints return aggregated performance data for use in downstream BI tools, executive exports, or scheduled data pipeline tasks.

The forecast endpoint returns AI-generated revenue projections by partner, channel, or program — including confidence intervals and scenario outputs for optimistic and conservative assumptions. All report data is refreshed in sync with connected data sources, typically within a 24-hour window.

Subscribe to real-time event notifications from Alliantra delivered to any HTTPS endpoint your system exposes. Webhooks are the primary mechanism for building reactive, event-driven workflows that respond to changes in partner status, performance anomalies, or AI-generated alerts.

All API traffic is encrypted in transit using TLS 1.3. At rest, partner data is encrypted using AES-256. API keys can be scoped to specific resources and operations, and revoked immediately from the workspace settings without affecting other keys.

Enterprise plans include IP allowlisting for API access, audit logs for all API activity, and the ability to configure separate key sets per integration or team. Role-Based Access Control (RBAC) ensures API credentials respect the same permission boundaries as UI access.