Settings → Agents & API mints keys (shown once, hashed at rest). The REST API at /api/v1 covers properties, companies, people, customers, deals, activities, tasks, invoices, campaigns and cases; /api/v1/agent-ops is a JSON-RPC over the same operations, and /api/mcp serves them to Claude Desktop, Claude Code and other MCP clients. Every operation and its inputs: unqio.app/docs/api.
Outbound webhooks are signed with a per-endpoint secret (X-Unqio-Signature over timestamp.body), retried on a 1m/5m/30m/2h/12h/24h schedule, and logged per delivery.