API Agency Mode

Agency work uses nested client routes. A valid agency API key alone is not enough — the agency must also have an active grant for the target client account.

Pattern

/clients/{clientId}/lead-magnets
/clients/{clientId}/leads
/clients/{clientId}/activity

1. GET /clients (scope clients:read) to list accessible clients

2. Use the returned user_id as clientId

3. Call nested routes with the scopes those endpoints require

If a call returns 403, check both the API key scope and the agency-client grant.

Do not use account table IDs, API key IDs, key hashes, or private database fields as clientId.

Docs: https://app.leadpanther.ai/docs/agency-mode