Mainder Partners API

Welcome to the Mainder Partners API documentation. This API enables external integrations and partners to interact with Mainder programmatically, providing access to jobs, candidates, applications, and asynchronous webhooks.

Data API

24 GET operations for jobs, candidates, applications, clients, users, notes and follow-ups. The Data surface is read only; API keys do not have a global read only scope.

Webhooks API

Six management operations and asynchronous notifications for application creation, step changes, hiring and rejection. Delivery timing is not guaranteed.

The Data API exposes 24 GET operations. Webhook management exposes six operations, including creation, update, deletion and testing. API keys have no configurable scopes or Business Unit restriction within Partners. Access is company wide and does not reproduce an individual recruiter's visibility. A key is not globally restricted to read only across every Mainder API route. Notes can include private notes and candidate responses can contain personal data. Agree the permitted use and access before integration.

Pagination and exports

Jobs, Candidates, Job Applications, Clients and Users lists return arrays inside data under jobs, candidates, job_applications, clients and users respectively. Notes and Follow-ups return arrays directly at data. Paginated lists include meta.page, per_page, total_count, total_pages, next_page and prev_page. Defaults are page 1 and per_page 25; maximum per_page is 100. Nonpositive values fall back to defaults. Follow meta.next_page until null. An out of range page can resolve to the final page, so an empty array is not a safe stopping condition. No cursor, snapshot or configurable ordering is promised.

Exports support JSON and CSV. The default limit is 1,000 records and the default maximum is 10,000, configurable by PARTNERS_API_MAX_EXPORT_LIMIT. JSON returns data and meta.count, format, limit and max_limit. CSV returns a file. Read meta.max_limit for the effective JSON limit. Notes and users have no dedicated export operation. Duration depends on resource, relations, volume and load. Start with small limits and measure your integration.

Examples are synthetic and illustrative, not a complete schema or a guarantee that fields are populated. Candidate lists and JSON exports include the structured profile; detail also includes legal_id and birth_date. latest_note is truncated to 100 characters; use Notes for the complete content. CV URLs point to files, not extracted CV text. File links are configured to expire; refresh the resource when necessary. Treat identifiers as opaque and preserve the exact API field names.

Production enforcement, full webhook secret provisioning, authenticated integration acceptance, per record read auditing and per key throttling are not established by this documentation review. This page describes code behavior and does not promise those capabilities.

Base URLs

Production:https://api-prod.mainder.ai

Rate Limits

Rack::Attack configures 800 requests per minute per application bucket, identified by an authenticated user, DTA token hash or IP. Partners requests with only X-Api-Key normally share the IP bucket; this is not a dedicated per key quota. Production network limits were not verified. HTTP 429 does not always include Retry-After.