RevDesk API

Use this skill when a user asks to integrate with, script, or operate the RevDesk REST API.

Discover before acting

1. Read the canonical developer directory at https://www.revdesk.com/developers.
2. Use https://www.revdesk.com/openapi.json as the source of truth for paths, schemas, operation IDs, required scopes, rate limits, and deprecation signals.
3. Prefer @revdesk/sdk for TypeScript and npx @revdesk/sdk for one-off CLI requests.
4. Use https://docs.revdesk.com/api-reference for concepts and recovery guidance.

Authenticate safely

• A user creates an organization-scoped key in RevDesk under Settings → API Keys.
• Request only the scopes the task needs. Read endpoints generally require *:read; mutations require the corresponding *:write scope.
• Send the key only as Authorization: Bearer <key> and keep it in a secret or environment store.
• Read the WWW-Authenticate challenge and RFC 9728 metadata when a request returns 401 or 403.