Skip to main content
Leadping provides two POST endpoints for external lead intake. Both require a valid, enabled source key and a TrustedForm certificate URL.

Choose an endpoint

There is no GET or query-string intake endpoint.

Before sending a lead

Confirm that:
  • the source is enabled;
  • its lp_src_... key is configured in the posting system;
  • the organization can receive billed leads;
  • the payload contains a valid email address or U.S. phone number; and
  • the payload includes a TrustedForm certificate URL.

Authenticate

Send the source key in the Authorization header:
For example:
The key identifies the source and associates the created lead with its organization. It cannot access account, organization, analytics, or other non-intake operations.

Structured request

POST /leads accepts metadata, contact, and customer objects:
For this endpoint, send the certificate as metadata.trustedFormUrl.

Flat request

POST /leads/intake maps common top-level fields into the Leadping model:
For this endpoint, send the certificate as trustedFormUrl. Leadping also records the request IP address and user agent when available.

Immediate validation

Leadping validates the source and lead shape before creating the record: Do not retry 400, 401, or 403 responses until the request, credential, source, or account condition has changed.

Background processing

A 201 Created response means the lead record and conversation were created. The lead begins in Verifying while Leadping processes it. Leadping then validates that the TrustedForm value is an absolute HTTP or HTTPS URL on trustedform.com or one of its subdomains and that the certificate can be reached successfully. A lead that passes processing moves to Ready. If TrustedForm validation fails, the lead moves to Invalid with a processing-status reason. A 201 response does not mean background validation has completed.
Technical validation does not establish lawful contact, carrier approval, message delivery, or call completion.

Handle errors and retries

After a network timeout, check whether the lead was created before retrying. Stable externalId or sellerLeadId values make duplicates easier to find and reconcile.

Field practices

  • Format phone numbers as E.164, such as +15555550123.
  • Format dates as YYYY-MM-DD.
  • Use stable external IDs for reconciliation.
  • Keep sourceMetadata to 20 or fewer non-secret operational fields.
  • Never include source keys, API keys, tokens, or passwords in lead fields.
  • Keep field names and formats stable across integrations.

Go-live checklist

  • Submit a lead from the real production posting system.
  • Confirm it appears under the expected source.
  • Verify contact, address, tags, metadata, and TrustedForm mapping.
  • Wait for the processing status to become Ready.
  • Verify the conversation and intended workflow behavior.
  • Establish owners for failed posts, invalid leads, duplicates, and source-key rotation.
Use the API Reference for the complete generated schemas.