1. Access
The API, app keys, webhooks, deferred deep linking and install attribution are included with Business and Enterprise. If your plan drops below Business, API access stops.
2. Keys
- Secret keys are for your servers only. Never put them in an app, website or public code.
- App keys can be placed inside a mobile app; they can only match installs and send in-app events.
- You are responsible for all use of your keys. Revoke a key from Apps & API straight away if it may have leaked. We store keys only in a scrambled form and can't show them again.
3. Rate limits
Each key can make 300 requests a minute on Business and 1,200 on Enterprise. Requests over the limit are refused until the next minute. Don't try to get around limits, for example by spreading traffic across extra keys or accounts.
4. Webhooks
Webhooks are signed so you can check they came from AXO. Each event is sent once and not retried; use the API to catch up on anything missed. A webhook is switched off after 25 failed deliveries in a row. Only point webhooks at servers you control.
5. Deferred deep linking and attribution in your app
You decide what your app sends to AXO. You must explain in your app's privacy policy that installs and events are shared with AXO for attribution, get any consent your users' laws require, and follow the rules of every app store you publish in, including Apple's rules on tracking and App Tracking Transparency. Don't send AXO names, email addresses, phone numbers, payment details or other directly identifying information in event properties.
For the information your app sends, we act on your behalf and use it only to provide AXO to you, as described in the Privacy policy.
6. Changes to the API
We may add to the API at any time. If we remove or change something in a way that could break your integration, we will give you reasonable notice by email, except where we must act quickly for security or legal reasons.
7. Contact
Starlink Parts Trading FZE, Sharjah, United Arab Emirates, operating AXO at axo.nz.
Email [email protected] — for developer questions. Abuse reports go to [email protected].
Document history
| Version | Effective | Change |
|---|---|---|
| 1.1 | 27 October 2026 | The API, webhooks and install attribution are now included with Business and Enterprise only. |
| 1.0 | 27 October 2026 | First published. |