API Reference

Base URL

https://your-pounce-domain.com/api

All API endpoints require authentication unless noted.

Authentication

API requests use your license key as a Bearer token:

Authorization: Bearer PC-XXXX-XXXX-XXXX

Webhook Endpoints

These endpoints receive events from external providers.

Resend Inbound Email

POST /api/webhook/resend

Receives inbound email events from Resend. Automatically creates a lead from the email sender and content.

Booking Webhook

POST /api/webhook/booking

Receives booking events from Cal.com or Calendly. Logs the booking and updates lead status.

Form Endpoints

Submit Form

POST /api/f/{form-slug}

Submit a lead through a specific form. Accepts application/json or application/x-www-form-urlencoded.

Request body:

{
  "name": "Jane Smith",
  "email": "jane@example.com",
  "message": "I'm interested in your services"
}

Custom fields are included by their field name.

Form Embed Script

GET /api/f/{form-slug}/embed.js

Returns a JavaScript snippet that renders the form with your configured styling.

Form Embed HTML

GET /f/{form-slug}/embed

Returns the form as a standalone HTML page (for iframe embedding).

Admin Endpoints

All admin endpoints require session authentication (cookie-based).

License Verification

GET /api/license/verify

Returns license status, tier, and limits.

Response:

{
  "valid": true,
  "tier": "starter",
  "maxSites": 1,
  "activeSites": 1,
  "expiresAt": "2027-01-01T00:00:00Z"
}

Rate Limits

Endpoint	Limit
Form submissions	10/minute per IP
Webhook endpoints	100/minute per provider
Admin API	60/minute per session

Rate-limited requests receive a 429 Too Many Requests response with a Retry-After header.