Kartra is an all-in-one online business platform operated by Kartra, Inc. of Las Vegas, Nevada, that bundles landing pages and funnels, email marketing with automation sequences, checkouts and recurring billing, membership sites and courses, video hosting, calendars and booking, helpdesks, affiliate management and lead scoring into a single subscription. Its developer surface is three distinct things: an inbound API that is a single form-encoded POST endpoint at https://app.kartra.com/api driven by 29 documented `cmd` values and scoped to exactly one lead per call; an outbound API that POSTs 24 JSON lead and commerce events to URLs configured in the account; and an IPN system that POSTs six payment-lifecycle notifications as flat form variables. Kartra publishes no OpenAPI, no SDK in any language, no signed webhooks and no idempotency contract, and it returns HTTP 200 for every outcome including authentication failure — the numeric `type` field in the response body is the real error signal.
Kartra publishes 1 API on the APIs.io network. Tagged areas include Company, Marketing Automation, Email Marketing, CRM, and Contacts.
The Kartra catalog on APIs.io includes 1 event-driven AsyncAPI specification.
Kartra’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 23 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Payments regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Kartra's inbound developer API. One endpoint, POST only, form-encoded, with the operation selected by `actions[].cmd`. Twenty-nine documented commands cover leads, tags, lists, ...
aid: kartra
name: Kartra
description: 'Kartra is an all-in-one online business platform operated by Kartra, Inc. of Las Vegas, Nevada, that bundles
landing pages and funnels, email marketing with automation sequences, checkouts and recurring billing, membership sites
and courses, video hosting, calendars and booking, helpdesks, affiliate management and lead scoring into a single subscription.
Its developer surface is three distinct things: an inbound API that is a single form-encoded POST endpoint at https://app.kartra.com/api
driven by 29 documented `cmd` values and scoped to exactly one lead per call; an outbound API that POSTs 24 JSON lead and
commerce events to URLs configured in the account; and an IPN system that POSTs six payment-lifecycle notifications as flat
form variables. Kartra publishes no OpenAPI, no SDK in any language, no signed webhooks and no idempotency contract, and
it returns HTTP 200 for every outcome including authentication failure — the numeric `type` field in the response body is
the real error signal.'
image: https://kartra.com/wp-content/uploads/2024/06/Kartra-logo-icon-blue-transparent.png
url: https://raw.githubusercontent.com/api-evangelist/kartra/refs/heads/main/apis.yml
x-type: company
x-source: harvest:marketing-integration-graph
x-tier: enriched
x-tier-reason: enrichment-pipeline
specificationVersion: '0.20'
created: '2026-08-12'
modified: '2026-08-12'
tags:
- Company
- Marketing Automation
- Email Marketing
- CRM
- Contacts
- E-Commerce
- Payments
- Subscriptions
- Membership
- Landing Pages
- Webhooks
- SaaS
apis:
- aid: kartra:kartra-api
name: Kartra API
description: Kartra's inbound developer API. One endpoint, POST only, form-encoded, with the operation selected by `actions[].cmd`.
Twenty-nine documented commands cover leads, tags, lists, automation sequences, custom fields, lead scoring, pages, calendar
bookings, payment transactions and recurring subscriptions. Every call carries three credentials in the body — the developer's
`app_id` plus the end user's `api_key` and `api_password` — and acts on exactly one lead. Rate limited to 20 calls per
second per App.
humanURL: https://support.kartra.com/en/collections/19655232-developers
baseURL: https://app.kartra.com/api
tags:
- Marketing Automation
- Contacts
- Email Marketing
- Payments
- Subscriptions
properties:
- type: Documentation
url: https://support.kartra.com/en/collections/19655232-developers
- type: APIReference
url: https://support.kartra.com/en/articles/15369013-connecting-to-the-api
- type: GettingStarted
url: https://support.kartra.com/en/articles/15369011-activating-your-app
- type: Authentication
url: authentication/kartra-authentication.yml
- type: Conventions
url: conventions/kartra-conventions.yml
- type: ErrorCatalog
url: errors/kartra-error-codes.yml
- type: RateLimits
url: rate-limits/kartra-rate-limits.yml
- type: Sandbox
url: sandbox/kartra-sandbox.yml
- type: DataModel
url: data-model/kartra-data-model.yml
- type: Webhooks
url: asyncapi/kartra-webhooks.yml
- type: MCPServer
url: mcp/kartra-mcp.yml
- type: AgentSkill
url: skills/_index.yml
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
- FN: APIs.json
email: info@apis.io
common:
- type: Website
url: https://kartra.com/
- type: DeveloperPortal
url: https://support.kartra.com/en/collections/19655232-developers
- type: Documentation
url: https://support.kartra.com/en/collections/19655232-developers
- type: APIReference
url: https://support.kartra.com/en/articles/15369013-connecting-to-the-api
- type: GettingStarted
url: https://support.kartra.com/en/articles/15369011-activating-your-app
- type: Support
url: https://support.kartra.com/en/
- type: Blog
url: https://kartra.com/learning-center/
- type: Pricing
url: https://kartra.com/pricing/
- type: SignUp
url: https://kartra.com/kartra-trial/
- type: Login
url: https://app.kartra.com/login/
- type: TermsOfService
url: https://kartra.com/terms-conditions/
- type: PrivacyPolicy
url: https://kartra.com/privacy-policy/
- type: Compliance
url: https://kartra.com/gdpr/
- type: StatusPage
url: https://status.kartra.com/
- type: Integrations
url: https://kartra.com/integrations-and-apis/
- type: Authentication
url: authentication/kartra-authentication.yml
- type: Conventions
url: conventions/kartra-conventions.yml
- type: ErrorCatalog
url: errors/kartra-error-codes.yml
- type: RateLimits
url: rate-limits/kartra-rate-limits.yml
- type: Plans
url: plans/kartra-plans-pricing.yml
- type: Sandbox
url: sandbox/kartra-sandbox.yml
- type: Lifecycle
url: lifecycle/kartra-lifecycle.yml
- type: ChangeLog
url: changelog/kartra-changelog.yml
- type: Webhooks
url: asyncapi/kartra-webhooks.yml
- type: DataModel
url: data-model/kartra-data-model.yml
- type: Packages
url: packages/kartra-packages.yml
- type: Conformance
url: conformance/kartra-conformance.yml
- type: MCPServer
url: mcp/kartra-mcp.yml
- type: AgentSkill
url: skills/_index.yml
- type: LLMsTxt
url: llms/kartra-llms.txt
- type: DomainSecurity
url: security/kartra-domain-security.yml
x-vouched-by:
- FirstPromoter
- Improvado
x-vouch-count: 2
x-pointer-omissions:
note: Pointers deliberately NOT emitted, each backed by a probe or a search that found nothing. Recorded so a later pass
does not re-litigate them.
omitted:
- type: OpenAPI
reason: No OpenAPI, Swagger, GraphQL or AsyncAPI document found on kartra.com, app.kartra.com, api.kartra.com or support.kartra.com
(probed 2026-08-12).
- type: SDKs
reason: No first-party client library on npm, PyPI, RubyGems, Packagist or crates.io. Kartra ships PHP cURL snippets,
not an SDK. See packages/kartra-packages.yml.
- type: Idempotency
reason: Kartra documents no idempotency key, dedupe window or safe-retry contract. See conventions/kartra-conventions.yml.
- type: Deprecation
reason: No deprecation policy, no advance-notice window, no RFC 8594 Sunset/Deprecation headers. Removals are announced
only after they ship.
- type: Security
reason: No vulnerability disclosure policy, no bug bounty, no security@ address. See security/kartra-vulnerability-disclosure.yml.
- type: WellKnown
reason: No /.well-known document served by Kartra — 404 on kartra.com, 403 on app/api hosts. The one 200 is Intercom's
security.txt on the vendor-hosted help centre and is not Kartra's. See well-known/kartra-well-known.yml.
- type: SecurityTxt
reason: Same as WellKnown — the only security.txt reachable is Intercom's, canonicalised to app.intercom.com.
- type: AgentCard
reason: /.well-known/agent-card.json and /.well-known/agent.json probed on all four hosts; 404 or 403 everywhere. Nothing
written, per the search-only rule.
- type: GitHubOrganization
reason: github.com/kartra does not exist (GitHub API 404). Kartra publishes no source.
- type: Postman
reason: No Kartra-published public Postman collection or workspace found.
- type: Roadmap
reason: No public roadmap; kartra.com/roadmap/ returns 404.
- type: TrustCenter
reason: trust.kartra.com 307s to app.kartra.com/dashboard via the wildcard subdomain catch-all; no trust centre exists.
- type: CLI
reason: No first-party CLI.
x-enrichment:
date: '2026-08-12'
status: enriched
artifacts_added: 23
pass: local-v1
Kin Score
How this is scored →