Feature
REST API, webhooks and a CLI for your own tooling
A scoped REST API at /api/v1, signed webhooks with a delivery log, and a one-file CLI. Included in the Developer plan.
If the board is the system where work lives, other tooling has to be able to reach into it. Zuuna offers three ways: a REST API, signed webhooks and a CLI.
The API
/api/v1, authenticated with tokens that carry their own scopes — a read-only token can only read. Beyond cards and boards you can reach the parts that usually stay UI-only: checklist items, links between cards, and attachments, for reading and writing.
Webhooks
Outbound events to any URL you register — signed, so the receiving side can verify they really came from Zuuna. A delivery log shows what went out when and what the other end answered, which makes a failed call traceable instead of invisible.
The CLI
A single file, no installer. Built for the places where a script is closer to hand than an interface — CI steps, hooks, small automations on your own machine.
What it replaces
Zapier, Make and n8n need no dedicated integration: a token, a URL and the events you care about are enough. That is also why this site carries no long integrations list — a list would be a claim, the API is a fact.
Plan
Developer plan. The 3,000 requests per minute per user quoted there is the figure that applies to API access — on plans without API access, a rate limit is a meaningless number.
FAQ
Are the webhooks signed?
Yes. Every delivery carries a signature the receiving side can use to verify the call came from Zuuna and was not altered in transit.
Can I connect Zapier or Make?
Yes, through webhooks and the REST API. There is no dedicated integration and none is needed — both services speak HTTP, and that is the interface.
What can the API do that the interface cannot?
Nothing — it is the other route to the same data. The point is that checklists, card relations and attachments are reachable too, rather than the API stopping at title and status.
How are API tokens secured?
With scopes: a token only gets the rights you grant it, and can be revoked individually without taking other integrations down.