---
title: Public REST API
description: HiveCRM exposes its own REST API namespace so external systems can read and write CRM data, authenticated with WordPress Application Passwords.
url: "https://hiveplugins.com/docs/public-rest-api/"
updated: "2026-09-27"
category: HiveCRM
---

# Public REST API

HiveCRM exposes its own REST API namespace so external systems can read and write CRM data, authenticated with WordPress Application Passwords.

## How to Open Public API Settings

Go to **Hive CRM → Settings → Public REST API**.

## Enable the API

Toggle **Enable Public API** to turn HiveCRM's REST endpoints on. You can also enable **CORS** if you need to call the API directly from browser-based JavaScript on a different domain.

## Choose Which Modules Are Exposed

Individually toggle API access per module: Leads, Deals, Contacts, Estimates & Invoices, Projects, Tasks, and Tickets. Disabling a module here blocks external API access to it, even if the API itself is enabled.

## Create an Application Password

1. Under **Application Passwords**, enter a name describing what will use it (for example "Zapier Integration").
2. Click **Create**.
3. Copy the generated password immediately — it's only shown once.

## Authenticate a Request

Use HTTP Basic Authentication with your WordPress username and the generated application password against the base URL:

```
https://yoursite.com/wp-json/hive-crm/v1/
```

For example, fetching your leads:

```
curl -u "your_username:xxxx xxxx xxxx xxxx xxxx xxxx" 
  https://yoursite.com/wp-json/hive-crm/v1/leads
```

## Revoke Access

Open **Application Passwords** and revoke any password you no longer want to allow. This immediately blocks further requests using that credential, without affecting other application passwords on the account.

## Related Documentation

- [Integrations & Webhooks Overview](integrations-webhooks-overview.md)
- [MCP Server Integration](mcp-server-integration.md)