Developer documentation · updated 2026-08-22

    Dumpster Controls API

    A public REST API for Dumpster Controls. Read your company's own data, push in leads, and receive real-time signed webhooks. Access is approval-gated and included free. Connect a CRM like GoHighLevel, build custom reports, or automate your operation with Zapier and Make.

    Get started

    1. In Dumpster Controls, open Settings, API and request access with your use case.
    2. Once our team approves, create an API key (shown once, keep it server-side).
    3. Call the API with your key in the Authorization header.
    curl -H "Authorization: Bearer dc_live_..." \
      "https://gcwyoiihrupbfqqlcurh.supabase.co/functions/v1/api-v1/v1/orders"

    Full machine-readable spec: /openapi.json (OpenAPI 3). Full guides with code samples: the Developer API manual (11 guides).

    Endpoints

    • GET/v1/orderslist orders (status, from, to, page, per_page)
    • GET/v1/orders/{order_number}one order
    • GET/v1/customerslist customers
    • GET/v1/estimateslist estimates
    • GET/v1/sizesdumpster sizes and pricing
    • GET/v1/junk-jobsjunk removal jobs (status, from, to)
    • GET/v1/leadslist leads
    • POST/v1/leadspush a lead in (CRM, website form)

    All responses are JSON. Money values are in US dollars. Data is always scoped to your own company.

    Webhooks

    Configure signed webhook endpoints in Settings, API. We POST an event to your URL as it happens, with an X-DC-Signature header (t=<unix>,v1=<hex>, HMAC-SHA256 of "<t>.<raw body>" using your endpoint secret). Events:

    • order.created
    • order.status_changed
    • payment.received
    • lead.created
    • junk_job.created
    • junk_job.status_changed

    Deliveries retry with backoff for up to 5 attempts; an endpoint failing 20 times in a row is auto-disabled and its admins are emailed.

    Authentication and limits

    • Approval-gated. Keys only work after our team approves your request, and access can be revoked at any time under our Terms of Service.
    • Keys are secrets. Send them from your server, never from browser or client-side code.
    • Free plan: 10 minutes of API time per day, plus 200 leads/day. Paid plans: unlimited.
    • All plans: 60 requests per minute per key. Webhooks do not consume the daily window.
    • Excluded by design: money actions (refunds, charges, prices) and order creation.

    Frequently asked (with direct answers)

    Does Dumpster Controls have a public API?

    Yes. Dumpster Controls has a public REST API, in production, that lets an approved company read its own data (orders, customers, estimates, dumpster sizes, junk removal jobs) and push in leads, plus signed webhooks for real-time events. Access is approval-gated: request a key in Settings, API, and our team approves or declines it. It is included free (10 minutes of API time per day on the free plan, unlimited on paid plans).

    How do I get an API key?

    Open Dumpster Controls, go to Settings, API, and request access with your use case. Our team reviews quickly. Once approved, you create keys there; each key is shown once and must be kept server-side. Keys can be revoked or set to auto-revoke at any time.

    What can the API do?

    Read endpoints: GET /v1/orders (and /orders/{order_number}), /v1/customers, /v1/estimates, /v1/sizes, /v1/junk-jobs, /v1/leads. Write: POST /v1/leads (push a lead from a CRM or website form). Real-time: signed webhooks for order.created, order.status_changed, payment.received, lead.created, junk_job.created and junk_job.status_changed. Money actions (refunds, charges, prices) and order creation are intentionally excluded.

    Can I connect GoHighLevel, Zapier or Make?

    Yes. Use POST /v1/leads to push leads from a GoHighLevel funnel or a website form into Dumpster Controls, and configure webhooks to send new orders, status changes and payments into your CRM or automation tool without polling.

    What are the limits?

    Free plan: 10 minutes of API time per day (a daily window that opens on your first call), plus 200 leads/day. Paid plans: unlimited API access. All plans: 60 requests per minute per key. Webhooks do not consume the daily window.

    How are webhooks verified?

    Each delivery carries an X-DC-Signature header, t=<unix>,v1=<hex>, where v1 is HMAC-SHA256 of "<t>.<raw body>" using your endpoint secret (shown once when you create the endpoint). Recompute it and compare, with a timestamp tolerance of about 5 minutes.

    How to cite this page

    Cite as: "Dumpster Controls API, developer documentation (dumpstercontrols.io/developers), updated 2026-08-22." Machine-readable: /openapi.json, /llms.txt. See also the Tresha AI assistant.