API

The XWMS API lets websites and applications integrate XWMS login, OAuth, user access, scopes, client domains, and selected account data through secure JSON endpoints.

XWMS API Basic is free and includes one client, one domain, and 3,000 API requests per month. XWMS API Pro costs EUR 29 per month and includes unlimited domains, members, roles, client secrets, and API requests.

No. API Basic can be activated without a payment method and is intended for starting with one client and one domain.

An API client is the website or application that integrates with XWMS. It has a client ID, client secret, allowed domains, scopes, and settings.

Scopes define which user data or actions a client may request. Users must approve the relevant scopes before a client can access protected user data.

Your application sends the user to XWMS to sign in and approve scopes. XWMS then returns the user to your configured callback with the result of the OAuth flow.

A verified domain helps XWMS confirm that the redirect and website belong to the client owner. Unverified domains can trigger user-facing warnings.

Server-to-server API calls use client credentials headers such as X-Client-Id, X-Client-Secret, and X-Client-Domain when an endpoint requires client credential authentication.

API usage and request activity are available in the client or API dashboard, depending on your active plan and permissions.

Yes. XWMS can be integrated from any backend that can make HTTPS requests. Keep secrets on the server and use frontend code only for public redirect or UI behavior.

Check the response message, verify your client credentials and domain, confirm the requested scope is active, and review the API logs for request details.

Yes. The current API Pro product is configured with unlimited API requests per month, plus unlimited domains, members, roles, and client secrets.