100Hires Email Templates API

openapi: 3.2.0
info:
  title: 100Hires Email Templates API
  version: 2.0.0
  description: '## Introduction to the 100Hires ATS API

    The 100Hires ATS API (v2) helps you automate recruiting workflows end-to-end: candidates, applications, jobs, forms, notes, and partner-company operations. All endpoints return JSON and use bearer authentication. ## OpenAPI Spec

    The 100Hires ATS API follows the OpenAPI 3.x specification. Download the machine-readable spec for use in MCP servers, Cursor, Claude Code, or any OpenAPI tooling:


    `GET https://api.100hires.com/v2/openapi.json`


    ## Authentication

    Send API token in the `Authorization` header for every request:


    `Authorization: Bearer `


    Each API key is tied to a specific **user + company** pair. If the same user belongs to multiple companies, they need a separate key for each company. All actions performed through the API are attributed to the key owner. You can generate or view your API key at https://app.100hires.com/settings/integrations


    ### API Key Verification

    API keys for **unverified companies** are created in a disabled state and will return `401 Unauthorized` until the company passes verification. Once your company is verified, API keys start working automatically — no action required. If your key returns `401` and you believe your company should be verified, contact **support@100hires.com**. ## Rate Limits

    API keys that are not yet approved, such as keys created during the free trial, are subject to a hard rate limit of **1,000 requests per 10 minutes** per company. All API keys and MCP connections of a company share this limit. If your company is managed by a partner, it shares the partner''s limit. Personal API keys are approved automatically when the company starts a paid subscription. Requests over the limit receive a `429 Too Many Requests` response. ### Rate limit headers

    Unapproved keys include these headers on every response:


    | Header | Description |

    |--------|-------------|

    | `X-RateLimit-Limit` | Maximum requests allowed in the current window |

    | `X-RateLimit-Remaining` | Requests remaining in the current window |

    | `X-RateLimit-Reset` | Unix timestamp (seconds) when the window resets |


    ### Handling 429 responses

    When you receive a `429` response, wait until `X-RateLimit-Reset` before retrying. Do not retry immediately — repeated 429s may extend the cooldown. To remove rate limits for your integration, contact **support@100hires.com** with your use case. ## Content-Type

    All request bodies **must** use `Content-Type: application/json`. Sending `application/x-www-form-urlencoded`, `multipart/form-data`, or any other content type

    will result in a `415 Unsupported Media Type` error. ## Responses and Errors

    Standard HTTP status codes are used (`2xx`, `4xx`, `5xx`). All error responses are wrapped in an `error` object containing `name`, `message`, `code`, and `status`. Validation errors additionally include field-level details in `error.validation_errors`. See the Error handling section below for the full format and status table. ## Pagination

    List endpoints use `page` (1-based) and `size` (1-100, default 20). Paginated responses follow:

    `{ "": [...], "pagination": { "page_size", "page_count", "page", "total_count" } }`. ## Lists

    List routes are optimized for synchronization and operational dashboards. Most list endpoints support tenant scoping through optional `company_id` (when allowed by API key context). ## Confidential Data

    Some candidate profile values can be masked by account-level pricing/access rules. Integrations should not assume all profile fields are always fully visible. ## Customizing the Response

    Use endpoint filters (`status`, `job_id`, timestamps, taxonomy IDs, etc.) to minimize payload size and improve sync efficiency. Build incremental sync flows around timestamp filters where available. ## Supported File Formats

    File uploads use base64 payloads with metadata:

    `data`, `file_name`, `mime_type` (and optionally `size`). This format is used for candidate files, resumes, attachments, and logos.'
servers:
- url: https://api.100hires.com/v2
  description: Production API endpoint
security:
- BearerAuth: []
tags:
- name: Email Templates
  description: Email template CRUD for automation, nurture campaigns, and manual outreach.
paths:
  /email-templates:
    get:
      tags:
      - Email Templates
      summary: List email templates
      operationId: listEmailTemplates
      parameters:
      - $ref: '#/components/parameters/CompanyIdQuery'
      - $ref: '#/components/parameters/PageQuery'
      - $ref: '#/components/parameters/SizeQuery'
      - $ref: '#/components/parameters/ViewQuery'
      responses:
        '200':
          description: Email template list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EmailTemplateListResponse'
              example:
                email_templates:
                - id: 401
                  name: Interview Invitation
                  subject: Interview invitation
                  body: <p>Hi <tag contenteditable="false" data-type="system" data-identifier="first_name">First Name</tag>, we'd like to invite you for an interview.</p>
                  created_at: 1711036800
                  updated_at: 1711036800
                pagination:
                  page_size: 25
                  page_count: 1
                  page: 1
                  total_count: 1
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '429':
          $ref: '#/components/responses/TooManyRequests'
      description: Returns paginated email templates for the target company.
    post:
      tags:
      - Email Templates
      summary: Create email template
      operationId: createEmailTemplate
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EmailTemplateCreateRequest'
      responses:
        '200':
          description: Created email template
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EmailTemplate'
              example:
                id: 402
                name: Rejection Letter
                subject: Update on your application
                body: <p>Dear <tag contenteditable="false" data-type="system" data-identifier="first_name">First Name</tag>, thank you for your interest.</p>
                created_at: 1711036800
                updated_at: 1711036800
        '415':
          $ref: '#/components/responses/UnsupportedMediaType'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '400':
          $ref: '#/components/responses/ValidationError'
        '429':
          $ref: '#/components/responses/TooManyRequests'
      description: 'Creates a new email template with subject and body.


        **Placeholder workflow:**

        1. `GET /template-placeholders` — list available placeholders

        2. `POST /template-placeholders/prepare` — convert chosen placeholder to an HTML `` element

        3. Insert the returned HTML tag into the template body

        4. `POST /email-templates` — save the template with embedded placeholder tags'
  /email-templates/{id}:
    get:
      tags:
      - Email Templates
      summary: Get email template
      operationId: getEmailTemplate
      parameters:
      - $ref: '#/components/parameters/IdPath'
      responses:
        '200':
          description: Email template
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EmailTemplate'
              example:
                id: 401
                name: Interview Invitation
                subject: Interview invitation
                body: <p>Hi <tag contenteditable="false" data-type="system" data-identifier="first_name">First Name</tag>, we'd like to invite you for an interview.</p>
                created_at: 1711036800
                updated_at: 1711036800
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '429':
          $ref: '#/components/responses/TooManyRequests'
      description: Returns a single email template by ID with subject and body content.
    put:
      tags:
      - Email Templates
      summary: Update email template
      operationId: updateEmailTemplate
      parameters:
      - $ref: '#/components/parameters/IdPath'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EmailTemplateUpdateRequest'
      responses:
        '200':
          description: Updated email template
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EmailTemplate'
              example:
                id: 401
                name: Interview Invitation v2
                subject: Interview invitation
                body: <p>Hi <tag contenteditable="false" data-type="system" data-identifier="first_name">First Name</tag>, we'd love to schedule an interview with you.</p>
                created_at: 1711036800
                updated_at: 1711123200
        '415':
          $ref: '#/components/responses/UnsupportedMediaType'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '400':
          $ref: '#/components/responses/ValidationError'
        '429':
          $ref: '#/components/responses/TooManyRequests'
      description: 'Updates an existing email template. Only provided fields are overwritten; omitted fields keep their current values.


        To add placeholders to the body, use the same workflow as for creation:

        1. `GET /template-placeholders` — list available placeholders

        2. `POST /template-placeholders/prepare` — get HTML tag for the chosen placeholder

        3. Insert the tag into the body and `PUT /email-templates/{id}`'
    delete:
      tags:
      - Email Templates
      summary: Delete email template
      operationId: deleteEmailTemplate
      parameters:
      - $ref: '#/components/parameters/IdPath'
      responses:
        '200':
          description: Deleted
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SuccessResponse'
              example:
                success: true
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '429':
          $ref: '#/components/responses/TooManyRequests'
      description: Soft-deletes an email template. Templates already used in automations will stop being available for new actions.
components:
  responses:
    NotFound:
      description: Not found
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              name: Not Found
              message: Candidate not found
              code: 0
              status: 404
    Unauthorized:
      description: Unauthorized
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              name: Unauthorized
              message: Your request was made with invalid credentials.
              code: 0
              status: 401
    TooManyRequests:
      description: Too many requests
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              name: Too Many Requests
              message: Rate limit exceeded
              code: 0
              status: 429
    Forbidden:
      description: Forbidden
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              name: Forbidden
              message: You are not allowed to perform this action.
              code: 0
              status: 403
    UnsupportedMediaType:
      description: Content-Type must be application/json
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            error:
              name: Unsupported Media Type
              message: Content-Type must be application/json
              code: 0
              status: 415
    ValidationError:
      description: Validation error
      headers:
        X-RateLimit-Limit:
          $ref: '#/components/headers/RateLimitLimit'
        X-RateLimit-Remaining:
          $ref: '#/components/headers/RateLimitRemaining'
        X-RateLimit-Reset:
          $ref: '#/components/headers/RateLimitReset'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ValidationError'
  headers:
    RateLimitRemaining:
      description: Remaining requests in the current rate-limit window. Returned for unapproved API keys.
      schema:
        type: integer
    RateLimitReset:
      description: Unix timestamp when the current rate-limit window resets. Returned for unapproved API keys.
      schema:
        type: integer
        format: int64
    RateLimitLimit:
      description: Request limit for the current rate-limit window. Returned for unapproved API keys.
      schema:
        type: integer
  parameters:
    SizeQuery:
      name: size
      in: query
      required: false
      description: Number of items per page (1–100). Defaults to 20.
      schema:
        type: integer
        minimum: 1
        maximum: 100
        default: 20
    CompanyIdQuery:
      name: company_id
      in: query
      required: false
      schema:
        type: integer
      description: Optional target company ID. Since each API key is already bound to one company, this is only needed when the key owner has access to multiple companies.
    IdPath:
      name: id
      in: path
      required: true
      description: Resource ID (numeric).
      schema:
        type: integer
    ViewQuery:
      name: view
      in: query
      required: false
      description: 'Response shape selector for list endpoints. `full` (default) returns every field

        — backward-compatible with pre-existing clients. `summary` returns a thinned

        payload designed for agent-friendly list browsing: heavy fields (description

        HTML, embedded profile answers, full message bodies, embedded relations, etc.)

        are omitted or replaced with `*_preview` truncations. Use `summary` when paging

        through large result sets and fetch a single record with the corresponding

        `GET /{resource}/{id}` endpoint when full data is needed.

        '
      schema:
        type: string
        enum:
        - full
        - summary
        default: full
    PageQuery:
      name: page
      in: query
      required: false
      description: Page number (1-based). Defaults to 1.
      schema:
        type: integer
        minimum: 1
        default: 1
  schemas:
    EmailTemplate:
      type: object
      properties:
        id:
          type: integer
          description: Email template ID
        name:
          type: string
          description: Template name
        subject:
          type: string
          description: 'Email subject line as stored. Placeholders, when present, are stored as `<tag>` HTML produced by `POST /template-placeholders/prepare`; they are rendered to real values only at send time, not on read.

            '
        body:
          type: string
          description: 'Email body HTML as stored. Placeholders are stored as `<tag>` HTML produced by `POST /template-placeholders/prepare` and rendered at send time. Present only when `view=full` (default); omitted entirely when `view=summary` — template bodies can be tens of KB each.

            '
        url_backoffice:
          type: string
          format: uri
          description: Absolute backoffice URL to edit this email template in the 100Hires recruiter app. Use to render deep-links in agent UIs.
          example: https://app.100hires.com/settings/message-templates/edit?id=42
        created_at:
          type: integer
          description: Unix timestamp
        updated_at:
          type: integer
          description: Unix timestamp
    EmailTemplateCreateRequest:
      type: object
      required:
      - name
      - subject
      - body
      properties:
        company_id:
          type: integer
          description: Target company ID.
        name:
          type: string
          description: Template name
        subject:
          type: string
          description: 'Email subject line. Plain text.


            **Placeholders:** literal `{{first_name}}` / `{{job_title}}` tokens are NOT substituted — they will be delivered to the recipient verbatim. To embed a placeholder, call `POST /template-placeholders/prepare` and paste the returned HTML `<tag>…</tag>` string into this field.

            '
        body:
          type: string
          description: 'Email body HTML.


            **Placeholders:** literal `{{first_name}}` tokens are NOT substituted — the recipient will see the raw text. To embed a placeholder, call `POST /template-placeholders/prepare` and insert the returned `<tag contenteditable="false" data-type="…" data-identifier="…">…</tag>` element into the HTML at the position where the value should appear.

            '
      additionalProperties: false
    EmailTemplateUpdateRequest:
      type: object
      properties:
        name:
          type: string
          description: Template name
        subject:
          type: string
          description: 'Email subject line. Plain text.


            **Placeholders:** literal `{{first_name}}` / `{{job_title}}` tokens are NOT substituted — they will be delivered to the recipient verbatim. To embed a placeholder, call `POST /template-placeholders/prepare` and paste the returned HTML `<tag>…</tag>` string into this field.

            '
        body:
          type: string
          description: 'Email body HTML.


            **Placeholders:** literal `{{first_name}}` tokens are NOT substituted — the recipient will see the raw text. To embed a placeholder, call `POST /template-placeholders/prepare` and insert the returned `<tag contenteditable="false" data-type="…" data-identifier="…">…</tag>` element into the HTML at the position where the value should appear.

            '
      additionalProperties: false
    Pagination:
      type: object
      required:
      - page_size
      - page_count
      - page
      - total_count
      properties:
        page_size:
          type: integer
          description: Items per page.
        page_count:
          type: integer
          description: Total number of pages.
        page:
          type: integer
          description: Current page number.
        total_count:
          type: integer
          description: Total number of items.
    EmailTemplateListResponse:
      type: object
      required:
      - email_templates
      - pagination
      properties:
        email_templates:
          type: array
          description: Array of email templates.
          items:
            $ref: '#/components/schemas/EmailTemplate'
        pagination:
          $ref: '#/components/schemas/Pagination'
    ValidationError:
      type: object
      required:
      - error
      properties:
        error:
          type: object
          description: Validation error details object.
          required:
          - name
          - validation_errors
          properties:
            name:
              type: string
              description: Always "Validation Error" for validation failures
              example: Validation Error
            message:
              type: string
            code:
              type: integer
              example: 0
            status:
              type: integer
              example: 400
            validation_errors:
              type: object
              description: Field-level validation errors (field name to error message)
              additionalProperties:
                type: string
              example:
                email: Email cannot be blank.
                first_name: First Name cannot be blank.
      example:
        error:
          name: Validation Error
          message: ''
          code: 0
          status: 400
          validation_errors:
            email: Email cannot be blank.
            first_name: First Name cannot be blank.
    Error:
      type: object
      required:
      - error
      properties:
        error:
          type: object
          description: Error details object.
          required:
          - name
          - message
          - code
          - status
          properties:
            name:
              type: string
              description: Human-readable error type (e.g. "Not Found", "Bad Request", "Forbidden")
              example: Not Found
            message:
              type: string
              description: Detailed error message
              example: Candidate not found
            code:
              type: integer
              description: Application error code (0 for generic errors)
              example: 0
            status:
              type: integer
              description: HTTP status code
              example: 404
      example:
        error:
          name: Not Found
          message: Candidate not found
          code: 0
          status: 404
    SuccessResponse:
      type: object
      required:
      - success
      properties:
        success:
          type: boolean
          description: Always true on success.
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: APIKey
      description: 'Provide API token in header: `Authorization: Bearer <token>`. Each key is scoped to a specific user + company pair.'
    CompanySlugAuth:
      type: apiKey
      in: header
      name: X-Company-Slug
      description: 'Company slug for career site public endpoints. Alternative: pass as query param `company_slug`.'
x-tagGroups:
- name: Recruiting Operations
  tags:
  - Candidates
  - Applications
  - Interviews
  - Jobs
  - Evaluations
  - Notes
  - Messages
  - Notification Messages
  - Forms
  - Questions
  - Email Templates
  - Nurture Campaigns
  - Template Placeholders
  - Users
  - Attachments
- name: Organization and Settings
  tags:
  - Companies
  - Taxonomy
  - Billing
  - Feedback
- name: Career Site (Public)
  tags:
  - Career Site