Guide, developers

The GoHighLevel API: what it does and how to call it

The GoHighLevel API is a REST API for reading and writing data such as contacts in an agency or sub-account. Internal integrations use a Private Integration Token, and public apps use OAuth 2.0. Limits are 100 requests per 10 seconds and 200,000 per day, counted per app and per location or company.

Last updated November 1, 2026

Which authentication method should you use?

What does a request look like?

GET https://services.leadconnectorhq.com/contacts/CONTACT_ID
Authorization: Bearer YOUR_TOKEN
Version: 2021-07-28
Accept: application/json

{
  "contact": {
    "id": "CONTACT_ID",
    "locationId": "YOUR_LOCATION_ID",
    "email": "lead@example.com",
    "firstName": "Sam",
    "tags": ["from-n8n"]
  }
}

Treat this as the shape of a call, and check the current reference for the exact fields of the endpoint you use.

What are the rate limits?

• 100 requests per 10 seconds, per app and per location or company.
• 200,000 requests per day, on the same scope.
• Installing on more sub-accounts does not divide the allowance, because each install gets its own budget.
• Sandbox and trial tokens are lower, at 25 per 10 seconds and 10,000 per day, shared across the account.

What can the API not do?

Assume nothing. Not every screen in HighLevel has a matching endpoint, and the reference is the only reliable answer. Before scoping an integration, find the exact endpoint and scope for each step, and test it against a real sub-account.

What about the old V1 API?

A separate public API reference for V1 is still online. Build anything new against the current Marketplace documentation instead.