Integrations & data sources

Connect everything to Viperatron

Four ways to push data in, plus webhooks to send events back out. No proprietary SDK, no vendor lock-in, no "we support only these 20 CRMs." If it can POST JSON, it works with Viperatron.

Start free. Every plan includes the API.Read the docs

Four ways to get data in

Pick whichever matches where your data lives. All four work for any customer, any plan, from free to Enterprise.

Real-time webhook ingest

Pipelines

Each pipeline gets a unique endpoint and bearer token. Point any store, CRM, form, or custom app at the URL and events upsert contacts in under a second.

Dedicated URL per pipeline (no shared tenant key)
Bearer token auth, scoped to that pipeline only
Events feed an activity timeline on every contact
Contacts auto-tagged by pipeline for segmentation

Best for: Live data streams from e-commerce, CRM, or product events

One-off or recurring

CSV / XLSX import

Upload a spreadsheet from any source. Map columns, pick how to handle duplicates, and optionally tag every row with a pipeline in one click.

Drag-and-drop up to 100MB files
Auto-detects email, first name, last name, phone, country
Duplicate strategies: skip, update, overwrite
Large imports run in the background with progress updates

Best for: Migrating from another email tool, historical imports, one-time loads

Drop-in website capture

Embeddable forms

Generate a signup form for any form-type pipeline. Paste the snippet on plain HTML, WordPress, Webflow, or any frontend and submissions arrive as contacts.

Copy-paste HTML + JS snippet, no framework required
Works on static sites, CMSes, and SPA frontends
Pre-wired to the right pipeline and bearer token
Styleable with your own CSS

Best for: Newsletter, waitlist, and contact forms on your marketing site

Server-to-server

REST API

Full CRUD over contacts, campaigns, templates, segments, and automations. Use an API key for standard endpoints or a pipeline bearer token for the public ingest.

SHA-256 hashed API keys, per-integration scopable
OpenAPI spec for codegen and docs
Rate-limited per key, with clear 429 headers
Idempotency keys on writes

Best for: Backend jobs, CRMs, data warehouses, custom dashboards

Pipelines for every shape of data

Pick a pipeline type when you create it. Each type gets sensible defaults for its domain, and you can always change the type later.

E-commerce

Purchases, refunds, cart events from your storefront

Deal / Lead

Deal created, stage changes, closed-won from your CRM

Form

Contact form and waitlist submissions from any site

Custom

Product usage, feature events, churn signals, anything

One POST. That is it.

The pipeline endpoint accepts any JSON body with an event type, an occurred-at timestamp, and a contact identifier. Everything else is optional custom payload.

We upsert the contact on email, attach the event to their timeline, and run any automations keyed to that event type. Response time is typically under 50ms.

Full event schema reference

pipeline-event.sh

curl -X POST https://api.viperatron.com/inbound/pipelines/PIPELINE_ID/events \
  -H "Authorization: Bearer pk_live_xxx" \
  -H "Content-Type: application/json" \
  -d '{
    "eventType": "order.created",
    "occurredAt": "2026-04-18T12:00:00Z",
    "contact": {
      "email": "customer@example.com",
      "firstName": "Alex"
    },
    "payload": {
      "product": "Pro plan",
      "amountCents": 4900,
      "currency": "USD"
    }
  }'

Data out, too

Not every integration is about ingesting. When something happens inside Viperatron, we can push it back out to your own systems in real time.

Outbound webhooks

Subscribe any URL to campaign, contact, or automation events. We retry with exponential backoff for up to 24 hours on failed deliveries.

Event log export

Stream delivery, open, click, bounce, and unsubscribe events to your data warehouse via webhook or scheduled CSV export.

Public tracking

Open pixel and click redirect endpoints are public and CDN-cached for sub-100ms response times globally.

Built for production

Security and reliability every integration should expect.

Credentials at rest

API keys and pipeline tokens are SHA-256 hashed. Integration config secrets are AES-256 encrypted. We never store plaintext.

HMAC-signed unsubscribes

Unsubscribe tokens are HMAC-SHA256 signed, not base64 guesses. A token from one contact cannot be forged into another.

Rate limits with headers

Every response includes remaining quota and reset time headers. On 429, back off with the Retry-After value.

Retries that actually retry

Outbound webhook deliveries retry with exponential backoff for up to 24 hours. Failed events are preserved for manual replay.

Common questions

Do you have native integrations for Shopify, HubSpot, Salesforce?+

Not as first-party connectors. Instead, we give you pipelines. Shopify webhooks, HubSpot workflows, and Salesforce platform events all POST JSON, which is exactly what a pipeline accepts. The result is that we work with every version of every tool from day one, without waiting for a vendor partnership.

Can I use Zapier or Make.com?+

Yes. Both platforms have HTTP action blocks that work perfectly with pipeline webhook URLs and bearer tokens. Point a Zap at the pipeline URL and you are connected.

What happens if I send the same event twice?+

Use the sourceEventId field for idempotency. If we see the same pipelineId + sourceEventId pair twice, the second call is a no-op. Safe to retry as aggressively as you want.

Is there a rate limit?+

Pipeline ingest is rate-limited per pipeline, scaling with your plan. REST API calls are limited per API key. Both return 429 with a Retry-After header when throttled. Starter gets 100 requests/minute, Pro and Enterprise are uncapped.

Can I rotate tokens?+

Yes. Every pipeline and API key has a rotate button in settings. Old tokens continue working for 60 seconds after rotation to give in-flight requests time to complete, then they are permanently revoked.

Your stack, without the glue code

Create your account