REST API Reference: Bitrix24 tools and methods
Choose a tool for developing with an AI agent:
- use Alaio Vibecode to build an app for Bitrix24 from a task description without knowing any programming language. The agent writes the code and deploys the app to a server, with no manual hosting setup
- use the MCP server to develop a REST API integration in your own project. The agent refers to the official REST documentation
Using the REST API, an application works with Bitrix24 tools. For example, it can create a deal in the CRM, retrieve a task, upload a file to Drive, process a data change event, or embed a widget into a CRM card.
Quick links: all reference sections
How to find the right method
A method name hints at the object and the action: crm.deal.add creates a deal, tasks.task.get retrieves a task, disk.file.get retrieves a file.
A method can be checked programmatically, without opening its page. The method.get method shows whether a method exists and whether it is available to the application. The scope method returns the list of granted scopes. A complete machine-readable list of the new version's methods is available in the OpenAPI documentation.
How to work with the REST API
If you have not sent requests to the REST API yet, start with How to Make Your First API Request. The steps below describe working with the old version of the REST API. The differences of the new version are collected in the Which API version to choose block.
-
Determine the object and find the method in the reference sections overview.
-
Grant permissions. Almost every method belongs to a scope — a group of methods that the application gets access to. Scopes are listed when configuring application permissions. System methods work without a separate scope: the Scope block on their pages contains
basic. A scope does not grant access by itself — the application works only with the data that is visible to the user executing the request. -
Choose an authorization method. A webhook is suitable for an integration inside your own Bitrix24, and an application with OAuth 2.0 authorization is suitable for solutions installed on different Bitrix24 accounts. Both methods are described in Authorization in REST, and the tools for local integrations are described in Tools for Local Integrations.
-
Call the method. The address depends on the authorization method:
- webhook — the user identifier and the secret code are passed in the path:
https://your-domain.bitrix24.com/rest/USER_ID/WEBHOOK_CODE/method - application — the token is passed in the
authparameter:https://your-domain.bitrix24.com/rest/method?auth=ACCESS_TOKEN
The rules for passing parameters are described in How a Request Is Executed, and value formats are described in Data types and parameter formats. Field names and the format of boolean values depend on the module and the API version, so check them on the method page.
- webhook — the user identifier and the secret code are passed in the path:
-
Parse the response. The method data is returned in the
resultfield, and the execution time is returned in thetimefield. List methods return no more than 50 items at a time and pass the offset for the next page in thenextfield. Details are in How to Call REST API Methods and Features of List Methods. -
Handle errors. Instead of data, the server returns the
erroranderror_descriptionfields. The general list is in Error Codes, and the errors of a specific method are listed on its page.
After the first working call, the following will come in handy:
- Events — handler registration, if the integration has to react to changes in Bitrix24 instead of only requesting data
- batch — combines up to 50 calls into a single request
- REST API Limits — restrictions on the intensity and resource consumption of requests
- SDK for Bitrix24 Development — ready-made clients for JavaScript, PHP, Python, and Go
Which API version to choose
Both REST API versions work simultaneously and do not replace each other. Some sections have been migrated to REST 3.0. Such sections are marked in the tables below, and the remaining methods are called as before. The same method can exist in both versions with different parameters and a different response. If a method is available in both versions, REST 3.0 is recommended for new development: a unified response format, related objects in a single request, and protection against repeated execution using the Idempotency-Key header.
In REST 3.0, the call and the response parsing differ:
- the address contains the
/rest/api/segment - the request body is passed in JSON format only
- a list arrives as an array in the
itemskey insideresult - the page size and offset are set by the
paginationobject in the request — the composition of its fields is described on the method page - an error arrives as an
errorobject with thecode,message, andvalidationfields - the body of a batch packet is passed as a JSON array of objects with the
methodandqueryfields - the packet format with the
cmdwrapper does not work in the new version
The banner at the beginning of a method page shows its version. The same place carries a warning if the development of a method family has stopped — this also happens outside the deprecated methods section. The full version comparison is in the Comparison of REST 3.0 with the old version of the API table.
When to open a tutorial
Method pages help prepare individual requests, but they do not describe a complete workflow. If a task needs to be solved from start to finish, start with the tool's overview page or open the Tutorials — they cover ready-made scenarios made up of several calls.
Reference sections overview
Sections are grouped by task. The list of a section's methods is in the block with the #all-methods anchor at the end of its page. In large sections, the same block also lists subsections and their methods. Three sections are arranged differently:
- Bot Platform — the methods are split across subsections, and the entry point is the section index page
- Widgets — the
placement.*methods are located in the section root, and the catalog of embedding points is on the Placement Catalog page - Deprecated methods — the methods are moved to the RPA subsection
Data types and parameter formats, Method scopes, and How to work with files contain no methods of their own — these are rules common to the entire API. The REST 3.0 section describes the rules of the new version and its two own methods: rest.documentation.openapi and rest.scope.list.
REST API basics
|
Section |
Description |
|
Basic types, date formats, files, and complex parameters |
|
|
Application permissions to method groups |
|
|
System methods, application settings, users, and common events |
|
|
Handler registration, offline queue, and deletion of REST API events |
|
|
Call rules and response format of the new REST API version, and the list of sections migrated to it |
|
|
Robotic process automation (RPA) methods whose development has stopped — not for new solutions |
Sales and customers
|
Section |
Description |
|
Leads, deals, contacts, companies, SPAs, quotes, requisites, timeline activities, stages and pipelines, and CRM events |
|
|
Orders, cart, payments, shipments, cash registers, and store events |
|
|
Products, offers, prices, warehouses, warehouse documents, and catalog events |
|
|
Payment processors and payment settings |
|
|
Documents, templates, numbering, and roles |
|
|
HR electronic document management, signing documents with employees, integration with HR record-keeping systems, and signing events |
Automation and company operations
|
Section |
Description |
|
Templates, process launch, tasks, robots, and business process actions |
|
|
Tasks, checklists, comments, templates, stages, flows, and events. REST 3.0: some of the methods — the task itself, its chat, results, files, access permissions, and Gantt chart links |
|
|
Workgroups, projects, participants, scrum, and group events |
|
|
Calendars, entries, resources, and events |
|
|
Resources and their types, slots, bookings, waiting list, clients, links to external systems, and online booking events |
|
|
Employee sign-ins to Bitrix24 and other event log records. REST 3.0: the entire section |
|
|
Departments, teams, participants, and employees. REST 3.0: some of the methods — |
|
|
Working time, schedules, and time control. REST 3.0: some of the methods — work time records |
|
|
Users and user fields |
Communications
|
Section |
Description |
|
Chats, messages, files, users, and notifications |
|
|
Chatbots, commands, messages, and bot events. The current branch is |
|
|
Open Channels, sessions, operators, chats, connectors, and channel events |
|
|
Calls, Voximplant lines, and telephony events. REST 3.0: some of the methods — call follow-ups |
|
|
Third-party providers for sending SMS and other messages to customers, and delivery statuses |
|
|
News, comments, and feed events |
|
|
Surveys in chats and the news feed, votes, results, and reports |
|
|
Mailboxes, messages, and recipients. REST 3.0: the entire section |
|
|
Email services with IMAP parameters used to connect Gmail, Outlook, and other mailboxes |
Data, files, and content
|
Section |
Description |
|
Files, folders, data store, versions, and permissions |
|
|
File transfer formats in REST API |
|
|
The application's own data: |
|
|
Lists, sections, fields, and items |
|
|
Sites, pages, blocks, templates, and permissions |
|
|
Collections, documents, and files. REST 3.0: the entire section |
Platform capabilities
|
Section |
Description |
|
Application interface embedding points in Bitrix24 |
|
|
Connectors, sources, and BI analytics tables |
|
|
Custom AI services connected with the |
|
|
Custom widgets for the Vibe page, which is replacing the News Feed |
|
|
Agreements, their texts, and user consents |