I’m new to Infusionsoft but one thing I’m curious about…
If, in the scenario described, this third party (a call center) registers as a developer wouldn’t they only be able to post to their Infusionsoft instance? It seems to me that the only way they’d be able to post to my Infusionsoft instance is if I gave them my API credentials and in looking at the API docs it seems like that could give them a little too much power over my data. Like doing so would give them the ability to retrieve campaign info, remove people from campaigns, manage appointments, manage opportunities, etc.
All I’d want this third party to do is to add contacts and nothing else.
What’s the best way to achieve this?
One possible way would be for me to create my own API endpoint that this third party POSTs too and then I POST their contacts into my Infusionsoft instance. But maybe there’s a better way?