Bidsketch
BUSINESS · CRM & SUPPORT
Clients, proposals, fees, and reusable sections in the account they connected.
Connecting Bidsketch in practice
Bidsketch documents one clean limit — "We limit requests for each token to 100 requests in 20 seconds" — and then stops: its API documentation repository has no commits since December 2016, the help-centre article is stamped "Last updated on May 8, 2017", and the client libraries its README promised never appeared. The product is still sold and the API still answers, so this is a maintained-in-name-only surface rather than a sunset one.
Scopes that draw scrutiny
Authorization: Token token="…"An account-level token with no scopes and no read-only variant. Because "only Admin users can manage api tokens", the credential is minted by an admin and carries admin reach across clients, proposals and sections.
Rate limits
- "We limit requests for each token to 100 requests in 20 seconds" — per token, not per account and not per IP address.
Who has to approve
Bidsketch states in its API docs that "only Admin users can manage api tokens", and in its help centre that "only the account admin can manage the API token", reached through Account Settings and the API & Integration tab. There is no app registration and no review process.
Worth knowing
- Plan and quota limits arrive as a status code most clients do not special-case: "426 | Upgrade Required | The account has hit a client or proposal limit", so a create call fails for billing reasons rather than permission ones.
- Two different codes both mean the token is wrong: 400 Bad Request for "No API token was provided" and 401 Unauthorized for "Revoked or Invalid API token".
- Pagination is offset-based, defaults to 100 objects per request, and documents no maximum per_page, no cursor and no total count.
- Validation errors come back as a bare array of strings with no field names or codes, and the token page lives on the customer’s own subdomain at [subdomain].bidsketch.com/account/api_tokens, so there is no single URL to send a customer to.
Checked against Bidsketch API documentation (2026-09-29), bidsketch-api commit history (2026-09-29), Using the Bidsketch API (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Bidsketch behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.