GoHighLevel API: what each plan gets and how to connect

Basic vs Advanced API access

HighLevel's pricing page shows Basic API Access on the $297 Unlimited plan and Advanced API Access on the $497 Agency Pro plan, and lists API Access among the core features. HighLevel's API documentation article spells out the split: Starter and Unlimited get Basic access through location API keys, which reach one sub-account at a time, while Agency Pro gets Advanced access with agency API keys and OAuth 2.0. Anything that works across the whole agency needs Agency Pro. HighLevel's own guide to creating sub-accounts through the public API, for example, says the Pro plan is required.

Private integration tokens and OAuth

HighLevel supports three ways to authenticate. Private integration tokens are the recommended choice for your own internal connections: you create one at agency or sub-account level, choose only the scopes it needs, and use it with API v2. Each agency and each sub-account can hold up to 20 tokens. HighLevel suggests rotating them every 90 days, and a rotation leaves a 7-day window in which the old and new tokens both work, so nothing breaks mid-switch. A compromised token can be expired immediately.

OAuth 2.0 is for apps installed across many accounts through the Marketplace, where each user grants access without sharing a password. Legacy API keys are being phased out for new accounts, and keys unused for 90 days or more may be marked expired, so new projects should start on tokens or OAuth. When someone installs an OAuth app, they review the read and write permissions it requests before approving it.

Rate limits

API v2 limits are counted per Marketplace app per resource, where a resource is one sub-account or one agency. Each gets a burst limit of 100 requests per 10 seconds and a daily limit of 200,000 requests. Because the budget belongs to each install, adding the same app to more sub-accounts does not split the allowance. Every response carries headers such as X-RateLimit-Remaining and X-RateLimit-Daily-Remaining, so a sync job can slow itself down before it hits the ceiling. HighLevel's pricing page says Enterprise customers can ask for an API limit increase.

Versions and where the API is growing

API v1 reached end of support on December 31, 2025. Existing v1 integrations keep running but get no updates or support, so anything important built on it should move to v2 with tokens or OAuth. HighLevel says a v3 is in development with new endpoints and better performance. Recent public endpoints show where the API is heading: Voice AI agents gained public APIs in September 2025, and HighLevel documents public endpoints for Documents and Contracts and for the SaaS Configurator. Bugs and questions go to the developer community at developers.gohighlevel.com, and Python and PHP SDKs are covered in HighLevel's API Center of Excellence article.

API, webhook or Zapier?

If you only need to push leads from another tool into HighLevel, or pass a pipeline change to a spreadsheet, the LeadConnector app on Zapier or a webhook step in a workflow is faster than writing code. The API earns its place when you need volume, custom logic or a product of your own: syncing a practice management system every night, building a reporting dashboard across clients, or publishing a Marketplace app. Keep in mind that webhook steps inside workflows are premium actions at $0.01 per execution after 100 free ones, while API calls count against the rate limits above.

Costs add up differently for every account. Put your numbers into the HighLevel cost calculator, or browse every HighLevel feature.

Cost your account Try HighLevel

Questions