Docs
Contacts

Create a contact

POSThttps://api.norreach.app/v1/contacts

Adds a person. Send consent with the lawful basis you hold — without one the contact is saved but nothing is ever sent to them. With upsert_on an existing contact with the same email (or phone) is updated instead (200). Automations that start on a new contact run as they do for contacts added in the app.

contacts:writeOperation id: create_contact
POST/contacts
curl -X POST "https://api.norreach.app/v1/contacts" \
  -H "Authorization: Bearer $NORREACH_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
  "first_name": "Maja",
  "last_name": "Lind",
  "email": "maja.lind@example.com",
  "phone": "+46 70 123 45 67",
  "company": "Example Care AB",
  "tags": [
    "webinar"
  ],
  "consent": {
    "basis": "consent",
    "source": "webinar_signup"
  },
  "upsert_on": "email"
}'
Create a contact
{
  "id": "7d1c3b2a-5e4f-4a1b-9c8d-0e1f2a3b4c5d",
  "object": "contact",
  "first_name": "Maja",
  "last_name": "Lind",
  "email": "maja.lind@example.com",
  "phone": "+46701234567",
  "company": "Example Care AB",
  "title": "Head of Staffing",
  "status": "new",
  "stage": "new",
  "tags": [
    "webinar"
  ],
  "source": "api",
  "assigned_to": null,
  "timezone": "Europe/Stockholm",
  "linkedin_url": null,
  "fit_score": null,
  "consent": {
    "basis": "consent",
    "source": "webinar_signup",
    "recorded_at": "2026-11-04T09:12:33.120Z"
  },
  "attrs": {
    "crm_id": "C-1042"
  },
  "created_at": "2026-11-04T09:12:33.120Z",
  "updated_at": "2026-11-04T09:12:33.120Z"
}

Authorizations

Authorizationstringheaderrequired

Bearer authentication: send Authorization: Bearer <key>, with an API key or an OAuth access token. The key needs the scope contacts:write. API keys and scopes

Headers

Idempotency-Keystringheader

Any unique string (≤ 255). The same key with the same request returns the first answer for 24 hours.

Body

application/json

first_namestringrequired
last_namestring
emailstring (email) | null
phonestring | null

Any common format; stored as E.164. Needs a country code.

companystring | null
titlestring | null
statusenum
One of:newcontactedinterestednot_interestedconvertedmeeting_bookedbad_databad_timingneutralunresponsiveunqualifieddnc
stageenum
One of:newcontactedmeetingqualifiedwonlost
tagsstring[]
assigned_tostring (uuid) | null
timezonestring | null
linkedin_urlstring (uri) | null
attrsobject
sourcestring

Where the contact came from (lowercase letters, digits and _). Defaults to api.

consentobject

The lawful basis for contacting them. Without it the contact is saved but nothing is sent to them.

Show child attributes
consent.basisenumrequired
One of:legitimate_interestconsentcontract
consent.sourcestring

Where the basis came from. Defaults to api.

upsert_onenum

Update the existing contact with this email (or phone) instead of failing with a conflict.

One of:emailphone

Response

201application/json— Create a contact

idstring (uuid)required

An id (UUID).

object"contact"required
first_namestringrequired
last_namestringrequired
emailstring | nullrequired
phonestring | nullrequired

E.164, e.g. +46701234567.

companystring | nullrequired
titlestring | nullrequired
statusstringrequired

One of: new, contacted, interested, not_interested, converted, meeting_booked, bad_data, bad_timing, neutral, unresponsive, unqualified, dnc.

stagestring | nullrequired

Pipeline stage — one of: new, contacted, meeting, qualified, won, lost.

tagsstring[]required
sourcestring | nullrequired

Where the contact came from (api for contacts created through the API).

assigned_tostring (uuid) | nullrequired

The member who owns this contact.

timezonestring | nullrequired

IANA time zone — quiet hours follow it.

linkedin_urlstring | nullrequired
fit_scorenumber | nullrequired
consentobject | nullrequired
attrsobjectrequired

Your own fields (free-form JSON, at most 16 KB).

created_atstringrequired

RFC 3339 UTC timestamp with milliseconds.

updated_atstringrequired

RFC 3339 UTC timestamp with milliseconds.

Errors

Errors are application/problem+json with a stable code.

StatusCodeMeaning
400bad_requestThe request couldn't be read.
400unknown_fieldThe request has a field this operation doesn't know.
401unauthorizedA valid API key is required.
403insufficient_scopeThis API key doesn't have the scope this operation needs.
403feature_not_enabledThe API isn't switched on for this workspace.
409idempotency_in_progressA request with this Idempotency-Key is still running.
409conflictThat conflicts with the current state.
413too_largeThe request body is too large.
422validation_failedThe request has invalid fields.
422idempotency_mismatchThis Idempotency-Key was used with a different request.
429rate_limitedToo many requests. Slow down and try again.
500server_errorSomething went wrong on our side.
503unavailableThe API isn't available right now. Try again shortly.