API and webhooks
Connect Galley to your own tools, like your CRM or a spreadsheet. On the Pro plan.
- What can I do with the Galley API?Your own tools can work with your data room without anyone opening Galley.
- How do I make an API key?Owners can, on the Pro plan: Open Company settings (click your picture at the top right, then Company settings).
- When does an API key stop working?As soon as an Owner chooses Revoke next to it in Company settings (click your picture at the top right, then Company settings).
- How do I make my first API request?Every request goes to https://galley.1936ai.com/api/v1, with your key in the Authorization header.
- How do pages, limits and errors work in the API?Pages. Lists return 25 items at a time as data, newest first (folders and groups oldest first), with a next_cursor. Add ?limit= (1 to 100) for more at a time.
- How do I invite and manage investors through the API?RequestWhat it does GET /investorsYour investors. Filter with status (invited, active or revoked), type and updated_since.
- How do I upload documents through the API?RequestWhat it does GET /foldersEvery folder, with its path. POST /foldersMake a folder: name, and parent_id to put it inside another.
- How do I read activity through the API?GET /events lists what investors did, newest first. Filter with type (several, separated by commas), investor_id, document_id, since and until.
- How do I get instant alerts in another tool (webhooks)?A webhook is an address your tool gives you. Galley sends a message to it the moment something happens.
- What does a webhook send?A POST with a JSON body like this: { "id": "2b0e7c41-…", "type": "document.viewed", "created_at": "2026-10-17T09:30:02.000Z", "company": { "id": "…", "name": "Acme Labs" }, "data": { "id": "…", "type": "document.viewed", "occurred_at": "2026-10-17T09:30:00.000Z", "investor": { "id": "…", "email": "ananya@northwind.example", "name": "Ananya Rao" }, "document": { "id": "…", "name": "Pitch deck" }, "details": {} } } data is the event as GET /events gives it (see reading activity).
- How do I check a webhook really came from Galley?Every message has a Galley-Signature header like t=1792230600,v1=5257a869…. t is when it was sent, in seconds since 1970. v1 is an HMAC-SHA256, in hex, of t, a full stop and the body, made with your endpoint's signing secret.