Base URL: https://api.salesflare.com (production, default)
Auth header: Authorization: Bearer <API_KEY>
Optional local override: set SALESFLARE_BASE_URL to a staging URL if needed for local testing.

Core Scripts

scripts/sf — unified CLI wrapper (subcommands: discover, request, get, post, put, patch, delete, smoketest)
scripts/sf_discover.py — discover/list endpoints and methods from OpenAPI
scripts/sf_request.py — execute GET/POST/PATCH/PUT/DELETE with retry handling; supports query params, JSON body, auto-pagination
scripts/sf_smoketest.py — smoke-test OpenAPI operations in read-only mode by default; writes require --allow-write, and deletes require both --allow-write --allow-delete

Workflow

1) Discover endpoint and shape

scripts/sf discover --contains opportunities
scripts/sf discover --tag Accounts

2) Validate with read call

scripts/sf get --path /accounts --query limit=5 --query search=acme

3) Confirm before writes

Always confirm intent with the user before executing POST, PUT, PATCH, or DELETE. For DELETE operations, require explicit confirmation regardless of context — do not infer consent from prior conversation.

4) Execute write and report

Return:

action performed
target entity ID(s)
key changed fields
API response summary

5) Smoke-test safely

Default smoke test is read-only:

scripts/sf smoketest

Enable write-path testing explicitly:

scripts/sf smoketest --allow-write --safe-write

Enable delete-path testing only with dual opt-in:

scripts/sf smoketest --allow-write --allow-delete --safe-write

Mutation Safety Rules

POST/PUT/PATCH: always require explicit user confirmation before executing. Never infer consent.
DELETE: always require explicit user confirmation before executing. Never infer consent.
Smoke-test defaults to read-only. Use --allow-write for write-path testing, and require both --allow-write --allow-delete for delete-path testing.
Do not perform bulk mutations without explicit confirmation.
Prefer single-record updates before bulk updates.
Include IDs in all write output for traceability.
On 429, rely on script retry/backoff. If retries exhaust, stop and report clearly.

Output Rules

Default: concise summary + key IDs/fields
Provide raw JSON only when user asks for full payload
For large result sets, return top N and mention total if available

Filtering

Direct support: simple query params via repeated --query key=value
Advanced Salesflare query-builder filters (q object/rules): pass as raw serialized query payload when needed
This skill does not implement a high-level DSL for composing complex q structures

Common Endpoints

/accounts       /contacts       /opportunities
/tasks          /pipelines      /users   /me
/tags           /workflows

See references/endpoints.md for concrete command examples and write patterns.

Known Endpoint Caveats

GET /persons — bare call can return 500. Use ?search=... or ?id=... instead.
GET /tags/{tag_id} — returns 500 with valid IDs; use GET /tags and GET /tags/{tag_id}/usage.
GET /persons filter fields — GET /filterfields/person returns 400; use contact instead.
See references/endpoints.md for the full list of endpoint-specific caveats.

Resources

scripts/

sf — unified wrapper CLI
sf_discover.py — endpoint discovery from OpenAPI
sf_request.py — authenticated API execution helper
sf_smoketest.py — full operation smoke-test runner

references/

endpoints.md — practical request examples, write patterns, and endpoint-specific caveats

salesflare

Salesflare API

Overview

Quick Start