OAuth + PKCE
Authorization-code flow, exact redirect matching, mandatory S256 PKCE, short-lived access tokens and refresh-token rotation.
HelpoSoft Developer Platform
Build support into any product
Use OAuth 2.1-style authorization, scoped REST APIs, signed REST Hooks and bidirectional custom channels to connect HelpoSoft with SaaS products, hosting platforms, mobile apps and automation tools.
POST https://helposoft.com/oauth/tokengrant_type=authorization_code
client_id=hsoc_...
code=hsc_...
code_verifier=...
→ access_token: hso_...
→ expires_in: 3600
→ refresh_token: hsr_...Integration building blocks
Secure by default, flexible by design
REST Hook events
Subscribe Zapier, n8n, Make or a private service to tickets, chats, SLA alerts and automation events.
Custom channels
Send signed messages from any product into the HelpoSoft inbox and receive agent replies through your HTTPS callback.
Reliable delivery
Exponential retries, event IDs, response logging, safe endpoint validation, delivery replay and tenant-isolated credentials.
OAuth endpoints
Delegated access without sharing passwords
GET /oauth/authorizePOST /oauth/tokenPOST /oauth/revokeGET /oauth/userinfoAutomation endpoints
Instant REST Hook subscriptions
GET /api/v1/eventsPOST /api/v1/webhook-subscriptionsGET /api/v1/webhook-deliveriesDELETE /api/v1/webhook-subscriptions/{id}One support dashboard for every channel
Start with tickets and live chat, then connect the workflows your business already uses.
Extension SDK
Publish reviewed apps without executing code inside HelpoSoft
Marketplace apps receive HMAC-signed events through public HTTPS callbacks and call a separate signed action endpoint using only the permissions approved during installation.
Signed manifests
Semantic versions, minimum HelpoSoft requirements, publisher review, checksums and optional RSA signatures.
Explicit permissions
Apps request narrow access for tickets, contacts, notifications or analytics. Workspaces approve permissions before installation.
Idempotent actions
Create tickets, add replies, upsert contacts and notify agents using request IDs that safely prevent duplicate actions.
Marketplace lifecycle
Install, configure, license, disable, rotate secrets, inspect delivery logs, review and uninstall from one dashboard.