API & Webhooks

Disco’s API is a REST API that lets external systems programmatically manage Members, memberships, Programs, Pathways, Member Groups, invites, and magic login links in your Academy.

​

Overview

The API is the pull-based half of Disco’s developer toolkit. Use it to sync Members from a CRM, provision access from a sign-up flow, automate Admin and Manager assignments, or pull basic engagement data without working inside the Admin Area by hand. The API is available on the Enterprise plan only, and only Academy Owners and Admins can create or manage keys. Full endpoint reference and request and response schemas are published as OpenAPI documentation at https://api.production.services.disco.co/v1/docs.

​

Create an API Key

API keys are created and managed in the Admin Area.

1. Go to Admin Area → Settings → API.
2. Click + API Key.
3. Enter a Name. Names must be unique within your Academy.
4. Optionally set an Expiration Date. Leave it blank if the key should not expire.
5. Click Save.

The key is generated and its edit view opens so you can copy the value. Treat the key like a password and store it securely. The full key value remains accessible from the API Keys table if you need to retrieve it later.

​

Authenticate API Requests

All requests are made against the base URL: https://api.production.services.disco.co/v1 Authenticate every request by passing the key in the X-Disco-API-Key header. Disco does not accept Authorization or Bearer tokens.

​

Use the API

The API supports the Member and content operations most teams need to automate:

• Add or remove Members in your Academy or Programs
• Create magic login links for Members
• Add or remove Admins or Managers in your Academy or Programs
• Invite Members to your Academy or Programs
• List Programs and the Members in those Programs
• List Member Groups and the Members in those Groups
• Manage Member Group membership
• Pull basic engagement data for Members

For request and response schemas, see the OpenAPI docs at https://api.production.services.disco.co/v1/docs.

​

Delete an API Key

Deleting a key is immediate and cannot be undone.

1. Go to Admin Area → Settings → API.
2. Locate the key in the API Keys table.
3. Open the Action menu and click Delete.

Any system using the deleted key stops working right away. There is no soft-disable option, so if you only want to pause a key temporarily, plan to issue a new one when you need it again.

​

Rate Limits

Rate limits are applied per endpoint and per Academy. A request that exceeds the limit returns HTTP 429 with the message Rate Limited. Per-endpoint limits and the maximum number of IDs accepted by bulk endpoints are documented in the OpenAPI spec at https://api.production.services.disco.co/v1/docs.

​

FAQ