API Documentation

Base URL

https://expiro.io/api/v1

Authentication

The API uses bearer tokens. In Expiro, an account admin creates a token under Settings → API . The full token is shown once on creation, so copy it then.

Send it in the Authorization header on every request:

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://expiro.io/api/v1/contracts

A token can be given an expiry (30, 90 or 365 days, or never) and revoked at any time. A revoked or expired token stops working immediately.

Rate limit

Each account may make 60 requests per minute. Over that, the API returns 429 Too Many Requests; wait a moment and retry.

List contracts

GET /api/v1/contracts returns every contract on your account.

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://expiro.io/api/v1/contracts

Response:

{
  "data": [
    {
      "id": "5f9b2c1a-8e3d-4a7b-9c10-2b6e1f0a4d22",
      "name": "Annual retainer",
      "client_name": "Acme Corp",
      "client_email": "ops@acme.com",
      "value": "24000.00",
      "currency": "GBP",
      "start_date": "2026-01-01",
      "end_date": "2026-12-31",
      "status": "active",
      "pipeline_status": "upcoming",
      "auto_renewal": false,
      "renewal_notice_days": 90,
      "custom_fields": { "po_number": "PO-1188" },
      "inserted_at": "2026-01-02T09:14:00.000000Z",
      "updated_at": "2026-03-10T11:00:00.000000Z"
    }
  ]
}

Get one contract

GET /api/v1/contracts/:id returns a single contract by its id.

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://expiro.io/api/v1/contracts/5f9b2c1a-8e3d-4a7b-9c10-2b6e1f0a4d22

Response:

{
  "data": {
    "id": "5f9b2c1a-8e3d-4a7b-9c10-2b6e1f0a4d22",
    "name": "Annual retainer",
    "client_name": "Acme Corp",
    "status": "active",
    "end_date": "2026-12-31"
  }
}

An id that does not belong to your account returns 404 Not Found.

Errors

Errors come back as JSON with an error message:

{ "error": "Invalid or missing API token." }