OVERALL CONTROL / 0.6-customer-control
Grades and scoring
Data access
25% of the overall score before applicability adjustment.
Scored answers and evidence
Read interface 7.5/10
Structured API for the declared product scope
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Selected to-do lists return structured task objects.
Basecamp to-do reads and writes ↗
Get to-dos · Checked 2026-10-22
Bulk delivery 8.8/10
Batched or iterable API requests
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Follow Link headers through each collection and include non-default task states.
Basecamp API authentication, pagination and limits ↗
Pagination · Checked 2026-10-22
Query expressiveness 8.8/10
Documented structured API filters
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
completed and status select completed, archived and trashed to-dos.
Basecamp to-do reads and writes ↗
Get to-dos: optional query parameters · Checked 2026-10-22
Access cost barrier -
-
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Pricing lists external connections, but exact REST-route entitlement and fees remain unresolved.
Basecamp pricing and external connections ↗
Free and paid feature lists · Checked 2026-10-22
Third-party accessibility
20% of the overall score before applicability adjustment.
Scored answers and evidence
Third-party eligibility 10.0/10
Customer authorization without discretionary provider approval
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Users authorize registered OAuth applications to act on their behalf.
Basecamp API authentication, pagination and limits ↗
Authentication · Checked 2026-10-22
Downstream permission -
-
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Applicable processing, AI-use and redistribution terms remain unresolved.
Basecamp API authentication, pagination and limits ↗
Access route; downstream rights unresolved · Checked 2026-10-22
External action
15% of the overall score before applicability adjustment.
Scored answers and evidence
Write interface 7.5/10
Create and update in one business domain
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Create and update to-dos within accessible lists.
Basecamp to-do reads and writes ↗
Create a to-do and Update a to-do · Checked 2026-10-22
Custom application path 10.0/10
Customer applications using fixed APIs without provider selection
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Custom clients use the documented OAuth interface.
Basecamp API authentication, pagination and limits ↗
Authentication and Making a request · Checked 2026-10-22
Continuity
15% of the overall score before applicability adjustment.
Scored answers and evidence
Refresh mechanism 7.5/10
Documented updated-since filters or webhooks
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Project subscriptions notify the application about Todo changes.
Basecamp project webhooks ↗
Supported types: Todo and Todolist · Checked 2026-10-22
Limit visibility 10.0/10
Published numeric quotas and recovery instructions
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
A common initial limit is 50 requests/10 seconds/IP; limits vary dynamically and 429 carries Retry-After.
Basecamp API authentication, pagination and limits ↗
Rate limiting (429 Too Many Requests) · Checked 2026-10-22
CDC and deletion capture 2.5/10
Full snapshots permit customer reconciliation; native deltas unverified
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Explicit trashed-state scans support reconciliation; permanent deletion coverage is unverified.
Basecamp to-do reads and writes ↗
status and completed parameters · Checked 2026-10-22
Replay and gap recovery 5.0/10
Bounded redelivery or overlapping queries; no durable consumer checkpoint
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Delivery is attempted up to ten times before deactivation; no retained consumer checkpoint is established.
Basecamp project webhooks ↗
Webhook delivery and deactivation · Checked 2026-10-22
Data exit
20% of the overall score before applicability adjustment.
Scored answers and evidence
Export custody 7.5/10
Customer-held structured files or API records
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Scoped API records can be held outside the provider.
Basecamp to-do reads and writes ↗
Documented structured read response · Checked 2026-10-22
Post-cancellation access Disclosure
-
Disclosure only; does not reduce planned-exit credit.
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
The reviewed access docs do not establish contractual retrieval rights after cancellation.
Basecamp API authentication, pagination and limits ↗
Access route; termination rights unresolved · Checked 2026-10-22
Planned migration fidelity 7.5/10
Portable structured records on documented routes; whole-product completeness unverified
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Portable records are documented; complete native restore and history remain unverified.
Basecamp to-do reads and writes ↗
Read response and declared object scope · Checked 2026-10-22
Business logic and customization
5% of the overall score before applicability adjustment.
Scored answers and evidence
Logic authoring 2.5/10
External integration code; native business logic portability not established
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
External code can use the scoped API; native workflow portability is not established.
Basecamp API authentication, pagination and limits ↗
Application authentication · Checked 2026-10-22
Rights to custom logic -
-
Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded.
Native workflow ownership and reusable export rights require a separate contractual review.
Basecamp API authentication, pagination and limits ↗
Access route; native artifact rights unresolved · Checked 2026-10-22
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
CUSTOMER CHOICE
Third-party accessibility
Users authorize registered apps with OAuth. Requests need an identifying User-Agent; current permissions and active account status still constrain access.
Confirm who can connect, who owns the credentials and which uses are permitted. Customer consent and provider approval can be separate requirements; the selected plan and contract still matter.
READ / INTEGRATE
API and export routes
Follow Link pagination for each selected to-do list. Query completed tasks and archived or trashed states separately instead of treating the default list as complete.
| Access route | Authentication | Credential owner | Provider approval | Access requirement | Last checked |
|---|---|---|---|---|---|
| User-authorized OAuth to-do integration | oauth2 | Customer | No | customer authorization | 2026-10-22 |
Availability depends on your product, plan and agreement. See the documentation below for the requirements of each route.
ECONOMIC ACCESS
Cost, authentication and limits
Current pricing includes external AI and app connections on Free and paid packages. Exact REST-specific fees and minimum entitlement remain unconfirmed.
Check API entitlement, credential ownership and rate limits for the route you intend to use. Include review fees, customer-plan upgrades and ongoing access charges in the total.
ACT FROM OUTSIDE
External action
The API creates to-dos under a list and updates their fields. These operations do not cover every project tool.
Validate the supported operation, acting identity and permission scope (read access does not imply write permission). Ambiguous retries and revoked credentials also affect whether an external workflow can run safely.
KEEP ACCESS USEFUL
Continuity
Project webhooks cover Todo changes and attempt delivery up to ten times before deactivation. Retained event replay is not established.
CDC, deletions and recovery
| Question | Answer / applicable route | Evidence |
|---|---|---|
| Can ongoing extraction identify updates and deleted records on the declared route? | Full snapshots permit customer reconciliation; native deltas unverifiedBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Explicit trashed-state scans support reconciliation; permanent deletion coverage is unverified. | Basecamp to-do reads and writes ↗status and completed parametersChecked 2026-10-22 |
| How can extraction recover after missed events or an interrupted consumer? | Bounded redelivery or overlapping queries; no durable consumer checkpointBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Delivery is attempted up to ten times before deactivation; no retained consumer checkpoint is established. | Basecamp project webhooks ↗Webhook delivery and deactivationChecked 2026-10-22 |
Useful ongoing access includes corrections and deletions, not only the first export. A failed request, changed filter or lost resource permission should not be interpreted as a deleted record.
LEAVE WITH YOUR DATA
Data exit and portability
Selected task records can leave as JSON. Relationships, attachments, other tools and native templates need separate migration checks.
Test the output against the destination’s required fields and history. Check stable identifiers, relationships, attachments and extraction time; a sample file proves only the coverage of that sample.
BUILD / INSPECT / REUSE
Business logic and customization
Customers can write external integration code against the assessed API. Native workflow rights and independent execution remain unresolved (record access does not establish portable business logic).
Custom API access, ownership of workflows and the right to export their definitions are separate questions. A custom-app capability alone does not establish that business rules can move to another system.
AGREEMENTS / API DOCS / PROGRAM REQUIREMENTS
Documented conditions
Answers below come from public provider materials. Every answer retains its source check date, scope (a partner agreement does not describe every customer route). Customer contracts and live behavior still need verification.
| Question | Answer / applicable route | Evidence |
|---|---|---|
| What structured read interface is documented? | Structured API for the declared product scopeBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Selected to-do lists return structured task objects. | Basecamp to-do reads and writes ↗Get to-dosChecked 2026-10-22 |
| How can customers retrieve data in bulk? | Batched or iterable API requestsBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Follow Link headers through each collection and include non-default task states. | Basecamp API authentication, pagination and limits ↗PaginationChecked 2026-10-22 |
| What queries can a customer issue outside the provider UI? | Documented structured API filtersBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. completed and status select completed, archived and trashed to-dos. | Basecamp to-do reads and writes ↗Get to-dos: optional query parametersChecked 2026-10-22 |
| Who decides whether a chosen third party may connect? | Customer authorization without discretionary provider approvalBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Users authorize registered OAuth applications to act on their behalf. | Basecamp API authentication, pagination and limits ↗AuthenticationChecked 2026-10-22 |
| What extra commercial condition applies to the routes supplying the assessed read capability, relative to the lowest paid plan? | -Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Pricing lists external connections, but exact REST-route entitlement and fees remain unresolved. | Basecamp pricing and external connections ↗Free and paid feature listsChecked 2026-10-22 |
| Which external write operations are documented? | Create and update in one business domainBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Create and update to-dos within accessible lists. | Basecamp to-do reads and writes ↗Create a to-do and Update a to-doChecked 2026-10-22 |
| How can customers connect an application they build or choose? | Customer applications using fixed APIs without provider selectionBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Custom clients use the documented OAuth interface. | Basecamp API authentication, pagination and limits ↗Authentication and Making a requestChecked 2026-10-22 |
| What mechanism supports repeatable extraction of changes? | Documented updated-since filters or webhooksBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Project subscriptions notify the application about Todo changes. | Basecamp project webhooks ↗Supported types: Todo and TodolistChecked 2026-10-22 |
| How are integration limits disclosed? | Published numeric quotas and recovery instructionsBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. A common initial limit is 50 requests/10 seconds/IP; limits vary dynamically and 429 carries Retry-After. | Basecamp API authentication, pagination and limits ↗Rate limiting (429 Too Many Requests)Checked 2026-10-22 |
| Where can a usable data copy be delivered? | Customer-held structured files or API recordsBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Scoped API records can be held outside the provider. | Basecamp to-do reads and writes ↗Documented structured read responseChecked 2026-10-22 |
| What usable data or native definitions can leave before cancellation? | Portable structured records on documented routes; whole-product completeness unverifiedBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Portable records are documented; complete native restore and history remain unverified. | Basecamp to-do reads and writes ↗Read response and declared object scopeChecked 2026-10-22 |
| What retrieval rights are documented at cancellation? | -Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. The reviewed access docs do not establish contractual retrieval rights after cancellation. | Basecamp API authentication, pagination and limits ↗Access route; termination rights unresolvedChecked 2026-10-22 |
| How can customers define their own business logic? | External integration code; native business logic portability not establishedBasecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. External code can use the scoped API; native workflow portability is not established. | Basecamp API authentication, pagination and limits ↗Application authenticationChecked 2026-10-22 |
| What rights or portability are documented for custom workflow artifacts? | -Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Native workflow ownership and reusable export rights require a separate contractual review. | Basecamp API authentication, pagination and limits ↗Access route; native artifact rights unresolvedChecked 2026-10-22 |
| What permission is needed for the documented downstream use? | -Basecamp / customer-authorized OAuth API for selected project to-do lists and to-dos, including create/update and project webhooks. Chat, file bytes and complete account migration are excluded. Applicable processing, AI-use and redistribution terms remain unresolved. | Basecamp API authentication, pagination and limits ↗Access route; downstream rights unresolvedChecked 2026-10-22 |
SOURCES / SCOPE / HISTORY
Sources and open questions
This review is based on the documentation below. Live account behavior and customer-specific agreements haven’t been tested.
Still to confirm
- Exact REST-route commercial entitlement
- Permanent task deletion and retained event replay
- Applicable downstream terms where not established above
- Contractual post-cancellation retrieval rights
- Native workflow ownership, reusable definitions and complete product migration
Documentation
Assessment checked 2026-10-22. Each answer retains its source and applicable route; the check date does not establish live account behavior.