All integrations

SimpleKPI

DATA · DATA & ANALYTICS

KPIs, their data entries, and groups from that account’s own dashboards.

Connecting SimpleKPI in practice

SimpleKPI scopes a developer token read-or-write per resource type, and then its six roles — Owner, Admin, Manager, Contributor, Analyst and Viewer — narrow it again down to which individual KPIs a user may see and enter data against, so a token’s real reach is the intersection of the two. Sign-in for the current application is passwordless, while accounts still on the previous generation use passwords until they migrate.

Scopes that draw scrutiny

  • Developer API token (read or write, per resource type) Created and revoked under API Access in Settings. Read and write are separate grants per resource type, so a data-push agent does not need read on everything.
  • Contributor / Analyst / Manager (account roles) SimpleKPI’s six roles control what a user can see and do down to which KPIs they can access and enter data against, which bounds any token that acts as them.
  • Public dashboard and report share links Unguessable token URLs that need no login. They can be regenerated or revoked and their exposed data restricted, but while they exist they are unauthenticated read access to KPI data.

Worth knowing

  • SimpleKPI says rate limiting is applied to the Developer API but does not publish a figure, so an agent has to discover its own ceiling and back off on failure rather than plan around a number.
  • The current application replaced the previous generation of SimpleKPI in August 2026, and accounts that have not migrated still sign in with a password while migrated ones use passkeys, email one-time passcodes or Google and Microsoft SSO — so two authentication models are live at once.
  • Native connections cover a fixed list (Google Analytics 4, Google Search Console, Google Sheets, Stripe, Xero, Zendesk); anything else arrives through Zapier, a spreadsheet upload with AI column mapping, or the Developer API.
  • Pricing is one flat $79 a month with unlimited users, so adding a dedicated service user for an agent costs nothing — the constraint is role configuration, not seats.

Checked against Security (2026-09-29), Integrations (2026-09-29), Product overview (2026-09-29)

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

simplekpi_delete_groups_by_group_id_items_by_idWRITE

Delete group item via DELETE /groups/{group_id}/items/{id}

api
simplekpi_delete_groups_by_idWRITE

Delete group via DELETE /groups/{id}

api
simplekpi_delete_kpicategories_by_category_id_kpis_by_idWRITE

Delete kpi in category via DELETE /kpicategories/{category_id}/kpis/{id}

api
simplekpi_delete_kpicategories_by_idWRITE

Delete kpi category via DELETE /kpicategories/{id}

api
simplekpi_delete_kpientries_by_idWRITE

Delete kpi entry via DELETE /kpientries/{id}

api
simplekpi_delete_kpis_by_idWRITE

Delete kpi via DELETE /kpis/{id}

api
simplekpi_delete_kpiunits_by_idWRITE

Delete kpi unit via DELETE /kpiunits/{id}

api
simplekpi_delete_users_by_idWRITE

Delete user via DELETE /users/{id}

api
simplekpi_delete_users_by_user_id_groupitems_by_idWRITE

Delete user group item via DELETE /users/{user_id}/groupitems/{id}

api
simplekpi_delete_users_by_user_id_kpis_by_idWRITE

Delete user kpi via DELETE /users/{user_id}/kpis/{id}

api
simplekpi_get_groupsREAD

Get all groups via GET /groups

api
simplekpi_get_groups_by_group_id_itemsREAD

Get all group items via GET /groups/{group_id}/items

api
simplekpi_get_groups_by_group_id_items_by_idREAD

Get group item via GET /groups/{group_id}/items/{id}

api
simplekpi_get_groups_by_idREAD

Get group via GET /groups/{id}

api
simplekpi_get_kpicategoriesREAD

Get all kpi categories via GET /kpicategories

api
simplekpi_get_kpicategories_by_category_id_kpisREAD

Get all kpis in category via GET /kpicategories/{category_id}/kpis

api
simplekpi_get_kpicategories_by_category_id_kpis_by_idREAD

Get kpi in category via GET /kpicategories/{category_id}/kpis/{id}

api
simplekpi_get_kpicategories_by_idREAD

Get kpi category via GET /kpicategories/{id}

api
simplekpi_get_kpientriesREAD

Get all kpi entries via GET /kpientries

api
simplekpi_get_kpientries_by_idREAD

Get kpi entry via GET /kpientries/{id}

api
simplekpi_get_kpifrequenciesREAD

Get all kpi frequencies via GET /kpifrequencies

api
simplekpi_get_kpifrequencies_by_idREAD

Get kpi frequency via GET /kpifrequencies/{id}

api
simplekpi_get_kpiiconsREAD

Get all kpi icons via GET /kpiicons

api
simplekpi_get_kpiicons_by_idREAD

Get kpi icon via GET /kpiicons/{id}

api
simplekpi_get_kpisREAD

Get all kpis via GET /kpis

api
simplekpi_get_kpis_by_idREAD

Get kpi via GET /kpis/{id}

api
simplekpi_get_kpiunitsREAD

Get all kpi units via GET /kpiunits

api
simplekpi_get_kpiunits_by_idREAD

Get kpi unit via GET /kpiunits/{id}

api
simplekpi_get_reports_alldataentriesREAD

Get all data entries via GET /reports/AllDataEntries

api
simplekpi_get_usersREAD

Get all users via GET /users

api
simplekpi_get_users_by_idREAD

Get user via GET /users/{id}

api
simplekpi_get_users_by_user_id_groupitemsREAD

Get all user group items via GET /users/{user_id}/groupitems

api
simplekpi_get_users_by_user_id_groupitems_by_idREAD

Get user group item via GET /users/{user_id}/groupitems/{id}

api
simplekpi_get_users_by_user_id_kpisREAD

Get all user kpis via GET /users/{user_id}/kpis

api
simplekpi_get_users_by_user_id_kpis_by_idREAD

Get user kpi via GET /users/{user_id}/kpis/{id}

api
simplekpi_post_groupsWRITE

Add group via POST /groups

api
simplekpi_post_groups_by_group_id_itemsWRITE

Add group item via POST /groups/{group_id}/items

api
simplekpi_post_kpicategoriesWRITE

Add kpi category via POST /kpicategories

api
simplekpi_post_kpicategories_by_category_id_kpisWRITE

Add kpi to category via POST /kpicategories/{category_id}/kpis

api
simplekpi_post_kpientriesWRITE

Add kpi entry via POST /kpientries

api
simplekpi_post_kpientries_listWRITE

Add update kpi entry list via POST /kpientries/list

api
simplekpi_post_kpisWRITE

Add kpi via POST /kpis

api
simplekpi_post_kpiunitsWRITE

Add kpi unit via POST /kpiunits

api
simplekpi_post_usersWRITE

Add user via POST /users

api
simplekpi_post_users_by_user_id_groupitemsWRITE

Add user group item via POST /users/{user_id}/groupitems

api
simplekpi_post_users_by_user_id_kpisWRITE

Add user kpi via POST /users/{user_id}/kpis

api
simplekpi_put_groups_by_group_id_items_by_idWRITE

Update group item via PUT /groups/{group_id}/items/{id}

api
simplekpi_put_groups_by_idWRITE

Update group via PUT /groups/{id}

api
simplekpi_put_kpicategories_by_category_id_kpis_by_idWRITE

Update kpi in category via PUT /kpicategories/{category_id}/kpis/{id}

api
simplekpi_put_kpicategories_by_idWRITE

Update kpi category via PUT /kpicategories/{id}

api
simplekpi_put_kpientries_by_idWRITE

Update kpi entry via PUT /kpientries/{id}

api
simplekpi_put_kpis_by_idWRITE

Update kpi via PUT /kpis/{id}

api
simplekpi_put_kpiunits_by_idWRITE

Update kpi unit via PUT /kpiunits/{id}

api
simplekpi_put_users_by_idWRITE

Update user via PUT /users/{id}

api
simplekpi_put_users_by_user_id_kpis_by_idWRITE

Update user kpi via PUT /users/{user_id}/kpis/{id}

api

Put SimpleKPI behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.