API

Blue has an API (Application Programming Interface), so you can build your own integrations if required.

Blue has 100% API coverage. This means that anything that you can do in any of our apps, you can do programmatically. We have a powerful GraphQL API that has a full playground where you can test your queries and is fully documented.

Authentication

Create an API key in Organisation Settings → API. Each key is scoped to your organisation and carries the same permissions as your user. Send it on every request as a bearer token:

Authorization: Bearer <your-api-key>

Treat API keys like passwords — anyone with the key can call the API as you. Revoke unused keys from the same settings screen.

Rate Limiting

Blue’s API is rate-limited to keep the platform stable under heavy automation traffic. Limits apply per API key.

When you exceed the limit, the API returns HTTP 429 Too Many Requests with a Retry-After header telling you how many seconds to wait before retrying. Well-behaved clients should:

• Inspect the X-RateLimit-Remaining response header on every request to know how much quota is left.
• Back off when limits get tight rather than retrying tightly on 429.
• Batch related reads where possible — a single multi-record query is much cheaper than N single-record queries.

Pro and Enterprise plans benefit from Instant Queries, which speeds up frequently-repeated reads without affecting your rate-limit quota.

For workflows that require higher limits than the default ceiling, contact support — Enterprise customers can negotiate increased quotas.