Build on the
LendAutomate API
A comprehensive REST API backed by 145 router modules, 247+ unit tests, and 50+ webhook event types. Connect LendAutomate to your existing tech stack or build entirely new lending workflows on top of the platform.
Simple, Predictable API Design
Standard REST conventions. JSON responses. Bearer token auth. You'll be up and running in minutes.
// Example: Create a new loan application via the LendAutomate REST API
const response = await fetch('https://api.lendautomate.com/v1/deals', {
method: 'POST',
headers: {
'Authorization': 'Bearer la_live_xxxxxxxxxxxx',
'Content-Type': 'application/json',
},
body: JSON.stringify({
loan_type: 'bridge',
requested_amount: 2500000,
property_address: '123 Main St, Toronto, ON M5V 1A1',
borrower_id: 'bor_abc123',
broker_id: 'brk_xyz789',
pipeline_stage: 'intake',
}),
});
const deal = await response.json();
// deal.id → "deal_9f2k3m..."
// deal.status → "active"Everything You Need to Build
From a comprehensive REST API to a full sandbox environment, the LendAutomate developer platform has everything you need to build production-grade integrations.
REST API
A comprehensive REST API covering every entity in the platform — loans, borrowers, documents, payments, investors, and more. Build custom integrations, automate workflows, and connect LendAutomate to your existing tech stack.
- Full CRUD operations on all platform entities
- JSON:API compliant response format
- Cursor-based pagination for large datasets
- Bulk endpoints for high-volume operations
- Rate limiting with per-key quotas
- Versioned API with deprecation notices
Webhooks
Real-time event notifications delivered to your endpoint the moment something happens in LendAutomate. Build event-driven workflows without polling.
- 50+ event types across all platform modules
- Configurable endpoint per event category
- HMAC-SHA256 signature verification
- Automatic retry with exponential backoff
- Webhook delivery log and replay
- Test mode for local development
API Key Management
Granular API key management with per-key permissions, expiry controls, and usage analytics. Issue separate keys for each integration with only the permissions it needs.
- Per-key permission scopes (read, write, admin)
- Key expiry and rotation controls
- IP allowlist per API key
- Usage analytics and request logs
- Instant key revocation
- Environment-specific keys (sandbox vs. production)
OpenAPI Documentation
Interactive API documentation generated from the OpenAPI 3.0 specification. Explore endpoints, test requests, and download the spec for code generation — all in the browser.
- OpenAPI 3.0 specification (downloadable)
- Interactive Swagger UI explorer
- Request/response examples for every endpoint
- Authentication guide with code samples
- SDK generation from the OpenAPI spec
- Changelog with breaking change notices
Sandbox Environment
A fully isolated sandbox environment with realistic test data for development and QA. Build and test your integration without touching production data.
- Isolated sandbox with production-equivalent API
- Pre-seeded test data (loans, borrowers, documents)
- Simulated payment processing (ACH, wire)
- Webhook test delivery to localhost via tunnel
- Sandbox reset on demand
- Separate sandbox API keys
Partner Onboarding
A structured onboarding programme for technology partners building on the LendAutomate platform. Access dedicated support, co-marketing opportunities, and early access to new API capabilities.
- Dedicated partner sandbox environment
- Technical integration review and certification
- Co-marketing and marketplace listing
- Early access to beta API features
- Partner-specific rate limit tiers
- Dedicated partner success manager
50+ Webhook Events
Get notified the moment anything happens in your lending operation. Build event-driven workflows without polling.
Origination
- deal.created
- deal.stage_changed
- deal.approved
- deal.funded
- document.uploaded
Servicing
- payment.received
- payment.failed
- loan.delinquent
- draw.requested
- draw.approved
Borrower
- borrower.created
- borrower.kyc_passed
- borrower.portal_login
- message.sent
Investor
- investor.created
- capital_call.issued
- distribution.processed
- statement.generated
Compliance
- audit.event_logged
- hmda.report_ready
- kyc.status_changed
- data.retention_triggered
Built with Security First
Every API request is authenticated with bearer tokens, webhook payloads are signed with HMAC-SHA256, and all traffic is encrypted in transit with TLS 1.3. IP allowlisting, per-key scopes, and instant revocation give you complete control over API access.
Frequently Asked Questions
Ready to Build?
Request API access and get your sandbox credentials. Our team will walk you through the integration and help you go live faster.