API reference

Public endpoints.

Three of our endpoints are public and unauthenticated by design — they exist so anyone can independently verify the integrity of any delivery. The rest of the API is buyer-scoped behind a session cookie or signed download token.

GET /api/audit/[lead_id]

Returns the public exclusivity record for any lead. No authentication required. Buyer IDs are hashed — you can verify your own delivery without exposing other buyers.

Public No auth Rate limited: 60/min

curl https://fundingsourced.com/api/audit/fs_lead_8f3a2c

200 {
  "lead_id": "fs_lead_8f3a2c",
  "exclusivity": "exclusive",
  "status": "delivered",
  "captured_at": "2026-05-15T13:55:42Z",
  "max_delivery_count": 1,
  "delivered_to_count": 1,
  "deliveries": [{
    "delivery_id": "fs_dlv_a01",
    "buyer_hash": "9f41c6d2a0b87e1c",
    "delivered_at": "2026-05-15T14:02:11.293Z",
    "bid_won_cents": 12500,
    "signature": "ad42f1c8...",
    "status": "delivered"
  }],
  "attempts_to_others": 0
}

POST /api/audit/verify

Submit a delivery receipt and signature for HMAC verification. Confirms the receipt you hold matches our on-file record and has not been tampered with.

Public No auth HMAC-SHA256

curl -X POST https://fundingsourced.com/api/audit/verify \
  -H "content-type: application/json" \
  -d '{
    "lead_id": "fs_lead_8f3a2c",
    "buyer_id": "fs_buyer_demo01",
    "delivered_at": "2026-05-15T14:02:11.293Z",
    "exclusivity": "exclusive",
    "signature": "ad42f1c8..."
  }'

200 { "valid": true, "matches_record": true }

GET /api/audit/sample

Returns a sample receipt with synthetic data for testing your integration. The sample rotates daily but always returns a structurally valid payload.

Public No auth Synthetic data

curl https://fundingsourced.com/api/audit/sample

200 {
  "lead_id": "fs_lead_sample_01",
  "exclusivity": "exclusive",
  "status": "delivered",
  "captured_at": "2026-05-15T10:00:00Z",
  "max_delivery_count": 1,
  "delivered_to_count": 1,
  "deliveries": [{
    "delivery_id": "fs_dlv_sample_01",
    "buyer_hash": "0000000000000000",
    "delivered_at": "2026-05-15T10:05:00.000Z",
    "bid_won_cents": 10000,
    "signature": "sample_sig_not_valid_for_verify",
    "status": "delivered"
  }],
  "attempts_to_others": 0,
  "_note": "This is synthetic test data. Do not use with /api/audit/verify."
}

POST /api/v1/leads/intake

Affiliate revshare endpoint. Submit leads programmatically and earn per-funded conversion. Requires a valid x-affiliate-key header.

Authenticated x-affiliate-key Rate limited: 120/min

curl -X POST https://fundingsourced.com/api/v1/leads/intake \
  -H "content-type: application/json" \
  -H "x-affiliate-key: aff_live_k8x92m4pLqR7" \
  -d '{
    "business_name": "Sunrise Bakery LLC",
    "contact_first": "Maria",
    "contact_last": "Santos",
    "phone": "+15551234567",
    "email": "maria@sunrisebakery.com",
    "state": "FL",
    "monthly_revenue_cents": 8500000,
    "time_in_business_months": 24,
    "funding_amount_requested_cents": 5000000,
    "use_of_funds": "equipment",
    "consent": {
      "tcpa_accepted": true,
      "tcpa_language": "I agree to receive calls and texts...",
      "tcpa_timestamp": "2026-05-15T12:30:00Z",
      "tcpa_ip": "198.51.100.42",
      "landing_page_url": "https://partner-site.com/funding",
      "privacy_policy_accepted": true
    }
  }'

201 {
  "lead_id": "fs_lead_9d4b7e",
  "status": "accepted",
  "affiliate_id": "aff_demo01",
  "consent_recorded": true,
  "created_at": "2026-05-15T12:30:01.412Z"
}

POST Webhook delivery

When a lead is matched and sold, we POST the full payload to your configured webhook URL. The delivery includes the lead data, receipt, and HMAC signature for independent verification.

Buyer-configured URL HMAC-SHA256 signed Retries: 3x over 15 min

POST https://your-crm.com/webhooks/fundingsourced
Content-Type: application/json
X-FS-Signature: sha256=ad42f1c8e9b0...

{
  "event": "lead.delivered",
  "lead_id": "fs_lead_8f3a2c",
  "delivery_id": "fs_dlv_a01",
  "exclusivity": "exclusive",
  "delivered_at": "2026-05-15T14:02:11.293Z",
  "receipt": {
    "buyer_id": "fs_buyer_demo01",
    "buyer_hash": "9f41c6d2a0b87e1c",
    "bid_won_cents": 12500,
    "signature": "ad42f1c8..."
  },
  "lead": {
    "business_name": "Sunrise Bakery LLC",
    "contact_first": "Maria",
    "contact_last": "Santos",
    "phone": "+15551234567",
    "email": "maria@sunrisebakery.com",
    "state": "FL",
    "monthly_revenue_cents": 8500000,
    "time_in_business_months": 24,
    "funding_amount_requested_cents": 5000000,
    "use_of_funds": "equipment",
    "captured_at": "2026-05-15T13:55:42Z"
  },
  "consent": {
    "tcpa_accepted": true,
    "tcpa_timestamp": "2026-05-15T12:30:00Z",
    "tcpa_ip": "198.51.100.42",
    "landing_page_url": "https://fundingsourced.com/apply"
  }
}

Public endpoints.

Ready to integrate?