All integrations

Nusii

BUSINESS · CRM & SUPPORT

Proposals, their sections and line items, clients, and templates in that account.

Connecting Nusii in practice

Nusii speaks JSON:API at https://app.nusii.com/api/v2/, so a flat JSON body is rejected even when every field name is right, and each token is limited to 100 requests per 30 seconds. Its OAuth access tokens live only 24 hours, so an agent that connects today and returns tomorrow has to refresh before its first call.

Scopes that draw scrutiny

  • Authorization: Token token=API_KEY The account-wide key from Settings → API, in an unusual header form that is neither Bearer nor Basic. It carries no scopes, so an agent that only reads proposals holds the credential that can send them to clients.
  • OAuth 2.0 authorization code with PKCE The route for third-party apps, which avoids handing over the user’s API key. Access tokens expire after 24 hours and must be refreshed.

Rate limits

  • 100 requests per 30 seconds per token.
  • OAuth token endpoint: 20 requests per 60 seconds.
  • MCP endpoint: 60 requests per minute per access token.

Worth knowing

  • Requests must be serialized per the JSON:API specification, which means a data/type/attributes envelope rather than a plain object.
  • OAuth access tokens expire after 24 hours; only the refresh token keeps a long-lived agent alive, so refresh handling is not optional here.
  • Pagination is page-based with current_page, next_page, prev_page, total_pages and total_count metadata rather than cursors.
  • Proposal Activities is a separate resource from the proposal, so sends, views and status changes have to be read there rather than off the proposal object.

Checked against Nusii developer documentation (2026-09-29), Nusii API overview (2026-09-29)

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

nusii_delete_api_v2_clients_by_idWRITE

Delete client. DELETE /api/v2/clients/{id}. IRREVERSIBLE: this deletes the named record in the Nusii account.

readwrite
nusii_delete_api_v2_line_items_by_idWRITE

Delete line item. DELETE /api/v2/line_items/{id}. IRREVERSIBLE: this deletes the named record in the Nusii account.

readwrite
nusii_delete_api_v2_proposals_by_idWRITE

Delete proposal. DELETE /api/v2/proposals/{id}. IRREVERSIBLE: this deletes the named record in the Nusii account.

readwrite
nusii_delete_api_v2_proposals_by_proposal_id_taxations_by_idWRITE

Delete proposal taxation. DELETE /api/v2/proposals/{proposal_id}/taxations/{id}. IRREVERSIBLE: this deletes the named record in the Nusii account.

readwrite
nusii_delete_api_v2_sections_by_idWRITE

Delete section. DELETE /api/v2/sections/{id}. IRREVERSIBLE: this deletes the named record in the Nusii account.

readwrite
nusii_delete_api_v2_webhook_endpoints_by_idWRITE

Delete webhook endpoint. DELETE /api/v2/webhook_endpoints/{id}. IRREVERSIBLE: this deletes the named record in the Nusii account.

readwrite
nusii_get_api_v2_account_meREAD

Get account. GET /api/v2/account/me.

read
nusii_get_api_v2_clientsREAD

List clients. GET /api/v2/clients. `query` matches clients by free text and `query[nested]` searches nested attributes; `email` matches one address and `emails` a list.

read
nusii_get_api_v2_clients_by_idREAD

Get client. GET /api/v2/clients/{id}.

read
nusii_get_api_v2_currenciesREAD

List currencies. GET /api/v2/currencies.

read
nusii_get_api_v2_line_items_by_idREAD

Get line item. GET /api/v2/line_items/{id}.

read
nusii_get_api_v2_localesREAD

List locales. GET /api/v2/locales.

read
nusii_get_api_v2_pdf_page_sizesREAD

List PDF page sizes. GET /api/v2/pdf_page_sizes.

read
nusii_get_api_v2_proposal_activitiesREAD

List proposal activities. GET /api/v2/proposal_activities.

read
nusii_get_api_v2_proposal_activities_by_idREAD

Get proposal activity. GET /api/v2/proposal_activities/{id}.

read
nusii_get_api_v2_proposalsREAD

List proposals. GET /api/v2/proposals. Paginated. Nusii accepts the page number as either `page` or `page[number]` and the page size as either `per` or `per[size]`; send one spelling of each.

read
nusii_get_api_v2_proposals_by_idREAD

Get proposal. GET /api/v2/proposals/{id}.

read
nusii_get_api_v2_proposals_by_proposal_id_taxationsREAD

List proposal taxations. GET /api/v2/proposals/{proposal_id}/taxations.

read
nusii_get_api_v2_sectionsREAD

List sections. GET /api/v2/sections.

read
nusii_get_api_v2_sections_by_idREAD

Get section. GET /api/v2/sections/{id}.

read
nusii_get_api_v2_sections_by_section_id_line_itemsREAD

List section line items. GET /api/v2/sections/{section_id}/line_items.

read
nusii_get_api_v2_templatesREAD

List templates. GET /api/v2/templates.

read
nusii_get_api_v2_templates_by_idREAD

Get template. GET /api/v2/templates/{id}.

read
nusii_get_api_v2_themesREAD

List themes. GET /api/v2/themes.

read
nusii_get_api_v2_usersREAD

List users. GET /api/v2/users.

read
nusii_get_api_v2_webhook_endpointsREAD

List webhook endpoints. GET /api/v2/webhook_endpoints.

read
nusii_get_api_v2_webhook_endpoints_by_idREAD

Get webhook endpoint. GET /api/v2/webhook_endpoints/{id}.

read
nusii_post_api_v2_clientsWRITE

Create client. POST /api/v2/clients. Body requires: `client.name`, `client.email`.

readwrite
nusii_post_api_v2_integrations_less_annoying_crm_installationsWRITE

Create Less Annoying CRM installation. POST /api/v2/integrations/less_annoying_crm_installations. Body requires: `less_annoying_crm_installation.name`, `less_annoying_crm_installation.token`, `less_annoying_crm_installation.user_code`. REGISTERS A THIRD-PARTY CREDENTIAL: the body's `token` is the caller's Less Annoying CRM API token, stored by Nusii, not by Agentic Fabriq. Do not call this with a value you were not explicitly given for this purpose.

readwrite
nusii_post_api_v2_integrations_one_page_crm_installationsWRITE

Create OnePageCRM installation. POST /api/v2/integrations/one_page_crm_installations. Body requires: `one_page_crm_installation.name`, `one_page_crm_installation.api_key`, `one_page_crm_installation.api_secret`. REGISTERS A THIRD-PARTY CREDENTIAL: the body's `api_key` and `api_secret` are the caller's OnePageCRM credentials, stored by Nusii, not by Agentic Fabriq. Do not call this with values you were not explicitly given for this purpose.

readwrite
nusii_post_api_v2_proposalsWRITE

Create proposal. POST /api/v2/proposals. Body requires: `proposal`.

readwrite
nusii_post_api_v2_proposals_by_proposal_id_taxationsWRITE

Create proposal taxation. POST /api/v2/proposals/{proposal_id}/taxations. Body requires: `percentage`, `name`.

readwrite
nusii_post_api_v2_sectionsWRITE

Create section. POST /api/v2/sections.

readwrite
nusii_post_api_v2_sections_by_section_id_line_itemsWRITE

Create section line item. POST /api/v2/sections/{section_id}/line_items. Body requires: `line_item.name`.

readwrite
nusii_post_api_v2_webhook_endpointsWRITE

Create webhook endpoint. POST /api/v2/webhook_endpoints. Body requires: `webhook_endpoint.target_url`, `webhook_endpoint.events`.

readwrite
nusii_put_api_v2_clients_by_idWRITE

Update client. PUT /api/v2/clients/{id}. Body requires: `client.name`.

readwrite
nusii_put_api_v2_line_items_by_idWRITE

Update line item. PUT /api/v2/line_items/{id}. Body requires: `line_item`.

readwrite
nusii_put_api_v2_proposals_by_idWRITE

Update proposal. PUT /api/v2/proposals/{id}. Body requires: `proposal.title`.

readwrite
nusii_put_api_v2_proposals_by_id_archiveWRITE

Archive proposal. PUT /api/v2/proposals/{id}/archive. Archives the proposal. The sealed contract declares an empty request body, so no field is required.

readwrite
nusii_put_api_v2_proposals_by_id_send_proposalWRITE

Send proposal. PUT /api/v2/proposals/{id}/send_proposal. Body requires: `sender_email`, `subject`, `message`, `recipients`. SENDS REAL EMAIL to the recipients named in the body. The sealed contract declares two bodies for this operation and this tool ships the JSON one, which carries a `recipients` array of {name, email, eligible_to_sign} in place of the form variant's single `email`; `sender_email`, `subject`, `message` and `recipients` are all required.

readwrite
nusii_put_api_v2_proposals_by_proposal_id_taxations_by_idWRITE

Update proposal taxation. PUT /api/v2/proposals/{proposal_id}/taxations/{id}. Body requires: `percentage`, `name`.

readwrite
nusii_put_api_v2_sections_by_idWRITE

Update section. PUT /api/v2/sections/{id}. Body requires: `section.title`.

readwrite
nusii_put_api_v2_sections_by_section_id_line_items_by_idWRITE

Update section line item. PUT /api/v2/sections/{section_id}/line_items/{id}. Body requires: `line_item.name`.

readwrite

Put Nusii behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.