Getting Started

The Fivetran REST API allows you to programmatically manage your Fivetran account, groups, destinations, and connections, trigger syncs, and monitor status. Before you call the API, authenticate with an API key.

This guide explains how to get access, send your first request, and identify which connectors support API access and their authorization methods.

Authentication

The Fivetran REST API uses API key authentication. You can authenticate with either a Scoped API key or a System key.

Base URL

All API requests use this root URL: https://api.fivetran.com/v1/

Scoped API Key

A Scoped API key is a key-secret pair that you create as a Fivetran user to call the Fivetran REST API. The Scoped API key links to your account and inherits your RBAC permissions.

Instructions

1. In the Fivetran dashboard, click your username.

2. Click API Key.

3. Click Generate API key (or Generate new API key if one already exists).

   Creating a new API key and secret disables the previous API key.

4. Make a note of the key and secret as they disappear once you close the page or navigate away. You require the key and secret to access your Fivetran account using our API.

Scoped API Key FAQs

Read answers to frequently asked questions about our scoped API keys.

System API key

A System key is an organization-managed API key–secret pair for the Fivetran REST API. Use System keys to replace user-oriented, scoped API keys. Instead of relying on RBAC to scope permissions, you set permission at the key level and manage them centrally. This solves for key pain points in securely managing keys, allowing you to understand usage, rotation, and other key information.

See our System Keys documentation for more details.

Use API key in requests

For each request to the API, send the Base64-encoded string api_key:api_secret in the Authorization HTTP header.

Authorization: Basic <base64(api_key:api_secret)>

You can use the -u flag for curl to encode to Base64:

curl -u api_key:api_secret "https://example.com"

Or, you can encode to Base64 by running one of the following commands in CLI (depending on your environment):

• On Linux/macOS:

  echo -n '<API Key>:<Secret Key>' | base64
  

• On Linux/macOS (using OpenSSL):

  echo -n '<API Key>:<Secret Key>' | openssl base64
  

• On Windows (Command Prompt with OpenSSL installed):

  echo "<API Key>:<Secret Key>" | openssl base64
  

• On Windows (PowerShell):

  [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes("<API Key>:<Secret Key>"))
  

Example

• API key - d9c4511349dd4b86
• Secret - 1f6f2d161365888a1943160ccdb8d968
• Concatenated string - d9c4511349dd4b86:1f6f2d161365888a1943160ccdb8d968
• Base64-encoded string - ZDljNDUxMTM0OWRkNGI4NjoxZjZmMmQxNjEzNjU4ODhhMTk0MzE2MGNjZGI4ZDk2OA==

Authorization HTTP header: Authorization: Basic ZDljNDUxMTM0OWRkNGI4NjoxZjZmMmQxNjEzNjU4ODhhMTk0MzE2MGNjZGI4ZDk2OA==

API secret regeneration

To generate a new API secret, click Generate new secret. This action instantly replaces your API secret key with a new one.

Request content type

The Fivetran Public API only accepts requests with the Content-Type: application/json header explicitly specified in them. Make sure this header is present on your POST and PATCH calls.

Example request

curl -X POST "https://api.fivetran.com/v1/groups" \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -u "api_key:api_secret" \
  -d '{"name":"Group_Name"}'

Response

Every response has the following format:

{
  "code": "Success",
  "message": "message",
  "data": {}
}

Example response

{
  "code": "Success",
  "message": "Group has been created",
  "data": {
    "id": "group_id",
    "name": "Group_Name",
    "created_at": "2025-01-01T00:00:00Z"
  }
}

Fields

Error codes

We respond with standard codes for errors that occur during request processing.

Authorization methods for connectors

Authorization gives a connector permission to read from the source system (for example, Instagram, Salesforce, DB). Until you authorize the connector, it can’t fetch data even though you have successfully authenticated to the API.

You can authorize some connectors entirely by API, while others require a Connect Card flow. Support varies by connector.

• Connect Card - Redirect end users to an embeddable setup flow so they can authorize without sharing credentials with you.
• API-based authorization - Provide credentials in the connection payload using one of these methods:
  • Define an auth section in the request body.
  • Provide the login and password fields.
  • Provide a token and any related fields.
  • Provide a key and any related fields.

Refer to each connector’s API reference for the exact fields.

Connectors supported by API and their authorization methods

The following table lists the connectors supported by the Fivetran REST API and the authorization methods each one supports.

Common terms

Next, learn how to use pagination (cursor and limit query parameters) to iterate through long responses and handle API rate limits.

Also, explore the Fivetran REST API Postman collection to try requests quickly, and review webhooks for event-driven updates.