Agentic Fabriq
Tapfiliate
MARKETING · MARKETING
Affiliates, conversions, commissions, and payouts in that program’s account.
Connecting Tapfiliate in practice
Tapfiliate puts the API version in the URL path — currently https://api.tapfiliate.com/1.6/ — so an upgrade is a code change rather than a header change, and it authenticates with a single `X-Api-Key` that its own documentation warns "can approve commissions". The rate limit is never stated as a number; it exists only in the X-Ratelimit headers.
Scopes that draw scrutiny
X-Api-KeyOne account-wide key with no scopes. Tapfiliate’s own warning: "Your API keys can approve commissions, so be sure to keep them secret!" — the same credential that reads a report can approve a payout.
Rate limits
- "Most endpoints have rate limits", communicated through X-Ratelimit-Limit (total allowed requests in the period), X-Ratelimit-Remaining and X-Ratelimit-Reset (a Unix timestamp in seconds).
- No numeric ceiling is published, so the headers are the only way to learn it and it may differ per endpoint.
- Requests returning multiple items "will be paginated to 25 items by default".
Worth knowing
- The version lives in the path, so pinning it is unavoidable and moving off 1.6 touches every call site.
- HTTPS is mandatory: "Plain HTTP calls will fail", and an unauthenticated request fails rather than falling back to public data.
- Because approval is just another endpoint on the same key, an agent with read intent and a write-capable key is one bad tool call away from approving commissions.
- The 25-item default page size means an affiliate program of any size is dozens of pages unless you raise it explicitly.
Checked against Tapfiliate REST API documentation (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Tapfiliate behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.