Your leads, in every tool you use

Create a key in Settings, Integrations. It starts with elv_live_ and is shown once. Every key belongs to one workspace and only sees that workspace. Send it as a Bearer token:

curl https://elevion.cc/api/v1/me \
  -H "Authorization: Bearer elv_live_YOUR_KEY"

{ "workspace": { "id": "…", "name": "Nora's studio" }, "key": { "id": "…", "name": "Zapier" } }

A lead is a person who got a DM from one of your campaigns. Newest first, up to 100 per page. Pass the nextCursor you got back to read the next page.

• GET/leads

  Filters: status (contacted, replied, captured, opted_out), campaignId, email, since (an ISO date), limit (1 to 100) and cursor.

• GET/leads/{id}

  One lead, or 404 if it isn't in this workspace.

curl "https://elevion.cc/api/v1/leads?status=captured&limit=50" \
  -H "Authorization: Bearer elv_live_YOUR_KEY"

{
  "data": [
    {
      "id": "8c1d0e7a-...",
      "instagramUsername": "mia.moves",
      "email": "mia@example.com",
      "phone": null,
      "status": "captured",
      "keyword": "GUIDE",
      "replies": 2,
      "campaign": { "id": "f2a9...", "name": "Free guide" },
      "instagramAccount": "nora.jade",
      "createdAt": "2026-10-20T09:14:02.000Z",
      "capturedAt": "2026-10-20T09:16:40.000Z",
      "lastReplyAt": "2026-10-20T09:16:40.000Z"
    }
  ],
  "nextCursor": "eyJ0IjoiMjAyNi0xMC0yMFQwOToxNDowMi4wMDBaIiwiaWQiOiI4YzFkIn0"
}

• GET/campaigns

  Your campaigns with status, trigger, keywords and link. Filter with status.

• PATCH/campaigns/{id}

  Pause or resume. Resuming follows the same rules as the dashboard: your plan, a connected Instagram account and no other campaign answering the same keyword.

• GET/deliveries

  Matched comments and what Elevion did with each, newest first, with the same cursor paging as leads.

curl -X PATCH https://elevion.cc/api/v1/campaigns/CAMPAIGN_ID \
  -H "Authorization: Bearer elv_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "status": "paused" }'

Subscribe an https address to an event. Elevion checks for new events every minute and sends each one as a POST with JSON. Subscriptions start from now, older events aren't sent.

• lead.createdSomeone new got a DM
• lead.capturedThey left an email or number
• link.tappedThey opened your link, once per person

• POST/hooks

  Body: event and url. The answer includes a secret, shown once, for checking signatures.

• GET/hooks

  Your subscriptions and whether they're working.

• DELETE/hooks/{id}

  Unsubscribe. Answering any event with 410 Gone unsubscribes too.

curl -X POST https://elevion.cc/api/v1/hooks \
  -H "Authorization: Bearer elv_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "event": "lead.captured", "url": "https://example.com/elevion" }'

POST https://example.com/elevion
x-elevion-event: lead.captured
x-elevion-signature: t=1792500000,v1=5f2b…

{ "type": "lead.captured", "id": "lead.captured:8c1d…", "createdAt": "…", "data": { "lead": { … } } }

import { createHmac, timingSafeEqual } from "node:crypto";

export function fromElevion(rawBody, header, secret) {
  const { t, v1 } = Object.fromEntries(header.split(",").map((part) => part.split("=")));
  if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;
  const expected = createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex");
  return timingSafeEqual(Buffer.from(expected), Buffer.from(v1));
}

There's no Elevion app in the Zapier or Make directories yet. You can connect both today:

1. 1In Zapier, add a Webhooks by Zapier trigger with Catch Hook. In Make, add a Custom webhook. Copy the address it gives you.
2. 2Subscribe that address with the POST /hooks request above, using the event you want.
3. 3Send yourself a test: comment your keyword from a second account. The event shows up in Zapier or Make within a minute.

Errors come back as JSON with a readable error and a stable code. Each key can make 120 requests a minute; above that you get 429 with a retry-after header.

• 401invalid_keyThe key is missing, wrong or revoked.
• 403upgrade_requiredThe workspace isn't on Business anymore.
• 400invalid_inputA parameter is missing or doesn't fit.
• 404not_foundIt doesn't exist in this workspace.
• 409campaign_overlapAnother campaign already answers this keyword.
• 429rate_limitedSlow down for a minute.