Auth
OAuth 2.0 via Zoho’s developer console. Refresh tokens last 60 days with activity. Store securely; rotate secrets periodically.
Modules
CRM API covers Leads, Contacts, Accounts, Deals, Tasks, custom modules, and metadata. Each module has standard CRUD + search.
Rate Limits
Per-org daily call cap (based on plan). Concurrent call cap. Bulk APIs have separate limits. Track usage via /orgusage endpoint.
Bulk APIs
Bulk Read, Bulk Write for large imports/exports. Async — submit job, poll status, fetch results. Use for anything over a few hundred records.
Webhooks
Configure per-module webhooks on create/edit/delete. Destination URL signed with app secret. Verify signatures in your endpoint.