Retently
MARKETING · MARKETING
NPS campaigns, customers, companies, scores, and feedback in the account they connected.
Connecting Retently in practice
Retently treats its date filters as an exact UTC instant rather than a day, so endDate=2024-12-31 excludes everything after 00:00:00 UTC on 31 December, and a timestamp sent in milliseconds is not detected and resolves to a far-future date. The API allows 150 requests a minute, and a read-only key gets 403 Forbidden on every POST or DELETE.
Scopes that draw scrutiny
API key with Write permissionRetently’s own permission level. It is required for POST /api/v2/customers, /survey, /import, /response/tags, /response/topics and for the customer deletes, so it can send surveys to real people on the account’s credits.API key with Read permissionGET only. Enough for dashboards and reporting, including feedback text and NPS scores, and the right default for an agent that only reads.X-Api-Key header versus api_key query parameterBoth authenticate. Retently marks the query-parameter form "not recommended" because keys in URLs are logged by browsers, proxies and servers.
Rate limits
- 150 requests per minute against https://app.retently.com.
- List endpoints default to 20 items and accept limit up to 1,000.
- POST /api/v2/import accepts up to 200 historical feedback responses per request, synchronously.
Worth knowing
- Every request is scoped to the account that owns the key, and a resource that is missing, deleted or owned by another account all return an identical 404 — so an agent cannot distinguish "gone" from "not yours".
- Imported feedback counts toward the NPS score and trend but is excluded from delivery and funnel stats, consumes no send quota, and never triggers webhooks or reminders.
- GET /api/v2/ping is the cheap way to read the plan, the survey credit balance for the current period and the usage counters before spending any of them.
- The legacy Authorization: api_key=YOUR_KEY form is still fully supported, so older code keeps working and never gets nudged toward the header form.
Checked against Retently CX API (v2) reference (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Retently behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.