Vendors / CRM and sales

Pipedrive

Pipedrive supports customer tokens and unlisted OAuth apps, with updated-time queries and scoped delete events. Public Marketplace review does not gate the documented private installation route.

Overall controlB7.4*/10
Assessment checked 2026-10-16Public documentation · No live account test

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

HubSpot vs Pipedrive: compare API access and data control ↗

OVERALL CONTROL / 0.6-customer-control

Grades and scoring

Overall B / 7.4*/10, with 13 of 16 applicable scoring inputs verified. Missing evidence discounts the supported score (unknown answers remain unknown).

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Data access and planned exit carry the most weight. Known commercial barriers cap access; an unpublished price applies a bounded discount. Post-cancellation retrieval is a separate disclosure. Open each dimension to inspect its inputs and sources.

B6.6*/10

Data access

25% of the overall score before applicability adjustment.

Scored answers and evidence

Read interface 7.5/10

Structured API for the declared product scope

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Structured records are available for the declared product scope.

Deals API reference ↗
Get all deals; cursor, filters and status · Checked 2026-10-16

Answer-to-score anchors ↗

Bulk delivery 8.8/10

Batched or iterable API requests

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Iterable record queries provide bulk retrieval within endpoint limits; complete account recovery is unverified.

Deals API reference ↗
Get all deals; cursor, filters and status · Checked 2026-10-16

Answer-to-score anchors ↗

Query expressiveness 8.8/10

Documented structured API filters

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Get all deals; filters and pagination

Deals API reference ↗
Get all deals; filters and pagination · Checked 2026-10-16

Answer-to-score anchors ↗

Access cost barrier -

-

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Plan-based token budget does not establish the complete lowest-plan commercial entitlement

Rate limiting ↗
Reviewed route entitlement and plan conditions · Checked 2026-10-16

Answer-to-score anchors ↗
A8.8*/10

Third-party accessibility

20% of the overall score before applicability adjustment.

Scored answers and evidence

Third-party eligibility 10.0/10

Customer authorization without discretionary provider approval

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Private apps; no approval and unlisted installation link

Creating an app ↗
Private apps; no approval and unlisted installation link · Checked 2026-10-16

Answer-to-score anchors ↗

Downstream permission -

-

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Downstream processing, AI and redistribution permission require a separate applicable-terms review.

Authentication ↗
Authentication documentation reviewed; applicable downstream contractual clause not established · Checked 2026-10-16

Answer-to-score anchors ↗
A8.5/10

External action

15% of the overall score before applicability adjustment.

Scored answers and evidence

Write interface 7.5/10

Create and update in one business domain

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Create a deal; update a deal

Deals API reference ↗
Create a deal; update a deal · Checked 2026-10-16

Answer-to-score anchors ↗

Custom application path 10.0/10

Customer applications using fixed APIs without provider selection

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Customer application authentication for the declared route

Authentication ↗
Customer application authentication for the declared route · Checked 2026-10-16

Answer-to-score anchors ↗
B7.3/10

Continuity

15% of the overall score before applicability adjustment.

Scored answers and evidence

Refresh mechanism 7.5/10

Documented updated-since filters or webhooks

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Get all persons; updated_since

Persons API reference ↗
Get all persons; updated_since · Checked 2026-10-16

Answer-to-score anchors ↗

Limit visibility 10.0/10

Published numeric quotas and recovery instructions

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Published numeric limits, rate-limit errors and recovery information

Rate limiting ↗
Published numeric limits, rate-limit errors and recovery information · Checked 2026-10-16

Answer-to-score anchors ↗

CDC and deletion capture 7.5/10

Updates and deletion identities documented for the stated resources

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Event action and entity identity for create, change and delete; permission-scoped objects

Guide for Webhooks v2 ↗
Event action and entity identity for create, change and delete; permission-scoped objects · Checked 2026-10-16

Answer-to-score anchors ↗

Replay and gap recovery 5.0/10

Bounded redelivery or overlapping queries; no durable consumer checkpoint

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Webhooks retry three times after 3, 30 and 150 seconds; banned webhook messages are lost and no durable checkpoint is established.

Guide for Webhooks v2 ↗
Retry logic; Webhooks policy · Checked 2026-10-16

Answer-to-score anchors ↗
B7.5/10

Data exit

20% of the overall score before applicability adjustment.

Scored answers and evidence

Export custody 7.5/10

Customer-held structured files or API records

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Customer-held API records are documented; no whole-product custody claim is made.

Deals API reference ↗
Get all deals; cursor, filters and status · Checked 2026-10-16

Answer-to-score anchors ↗

Post-cancellation access Disclosure

-

Disclosure only; does not reduce planned-exit credit.

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Post-cancellation retrieval remains unresolved.

Authentication ↗
Reviewed technical route; applicable customer termination clause not established · Checked 2026-10-16

Answer-to-score anchors ↗

Planned migration fidelity 7.5/10

Portable structured records on documented routes; whole-product completeness unverified

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Portable records within the declared API scope; complete attachments, history and service configuration are unverified.

Deals API reference ↗
Get all deals; cursor, filters and status · Checked 2026-10-16

Answer-to-score anchors ↗
D2.1*/10

Business logic and customization

5% of the overall score before applicability adjustment.

Scored answers and evidence

Logic authoring 2.5/10

External integration code; native business logic portability not established

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Customer-built private apps

Creating an app ↗
Customer-built private apps · Checked 2026-10-16

Answer-to-score anchors ↗

Rights to custom logic -

-

Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Rights to native workflow definitions remain unresolved.

Authentication ↗
Reviewed technical route; native artifact ownership and export rights not established · Checked 2026-10-16

Answer-to-score anchors ↗

Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗

CUSTOMER CHOICE

Third-party accessibility

API tokens belong to one user and company; regenerating the token breaks integrations using it. Live private OAuth apps can be shared with any Pipedrive company through an unlisted link without app approval.

Third-party eligibilityCustomer authorization without discretionary provider approvalSource & scope ↗
Access cost barrier-Source & scope ↗
Downstream permission-Source & scope ↗

Confirm who can connect, who owns the credentials and which uses are permitted. Customer consent and provider approval can be separate requirements; the selected plan and contract still matter.

READ / INTEGRATE

API and export routes

Deal lists use cursor pagination and structured filters. Archived deals have a separate endpoint, and deleted deals remain available through the deleted status filter for 30 days. Webhooks cover supported CRM objects, subject to the webhook owner’s permissions.

Access routeAuthenticationCredential ownerProvider approvalAccess requirementLast checked
Customer-authorized API accessAPI keyCustomerNoCustomer-supplied credentials2026-10-16
Unlisted private OAuth appOAuth 2.0Integration providerNocustomer authorization2026-10-16

Availability depends on your product, plan and agreement. See the documentation below for the requirements of each route.

ECONOMIC ACCESS

Cost, authentication and limits

Daily API tokens are shared across the company, with a budget based on plan and seats; burst limits apply separately. The reviewed documentation does not establish every commercial condition relative to the lowest paid plan, so the price answer stays unresolved.

Check API entitlement, credential ownership and rate limits for the route you intend to use. Include review fees, customer-plan upgrades and ongoing access charges in the total.

ACT FROM OUTSIDE

External action

REST creates and updates deals and other CRM records. Customer apps can use an API token or private OAuth installation; publishing a public Marketplace app requires review.

Validate the supported operation, acting identity and permission scope (read access does not imply write permission). Ambiguous retries and revoked credentials also affect whether an external workflow can run safely.

KEEP ACCESS USEFUL

Continuity

Updated-time queries and webhooks v2 support ongoing CRM extraction. Failed webhook deliveries retry three times, but banning can discard events and prolonged failure removes subscriptions; the API copy still needs reconciliation.

CDC, deletions and recovery

QuestionAnswer / applicable routeEvidence
Can ongoing extraction identify updates and deleted records on the declared route?Updates and deletion identities documented for the stated resourcesPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Event action and entity identity for create, change and delete; permission-scoped objects

Guide for Webhooks v2 ↗Event action and entity identity for create, change and delete; permission-scoped objectsChecked 2026-10-16
How can extraction recover after missed events or an interrupted consumer?Bounded redelivery or overlapping queries; no durable consumer checkpointPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Webhooks retry three times after 3, 30 and 150 seconds; banned webhook messages are lost and no durable checkpoint is established.

Guide for Webhooks v2 ↗Retry logic; Webhooks policyChecked 2026-10-16

Useful ongoing access includes corrections and deletions, not only the first export. A failed request, changed filter or lost resource permission should not be interpreted as a deleted record.

LEAVE WITH YOUR DATA

Data exit and portability

Paginated CRM records can be held outside Pipedrive before cancellation. Archived deals require separate retrieval, and attachments, email history and complete workflow configuration are outside the completeness claim. Cancellation retrieval rights remain unverified.

Test the output against the destination’s required fields and history. Check stable identifiers, relationships, attachments and extraction time; a sample file proves only the coverage of that sample.

BUILD / INSPECT / REUSE

Business logic and customization

External apps can run customer code against fixed interfaces. The reviewed API documentation does not establish ownership or independent execution of native Pipedrive automation definitions.

Custom API access, ownership of workflows and the right to export their definitions are separate questions. A custom-app capability alone does not establish that business rules can move to another system.

AGREEMENTS / API DOCS / PROGRAM REQUIREMENTS

Documented conditions

Answers below come from public provider materials. Every answer retains its source check date, scope (a partner agreement does not describe every customer route). Customer contracts and live behavior still need verification.

QuestionAnswer / applicable routeEvidence
What structured read interface is documented?Structured API for the declared product scopePipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Structured records are available for the declared product scope.

Deals API reference ↗Get all deals; cursor, filters and statusChecked 2026-10-16
How can customers retrieve data in bulk?Batched or iterable API requestsPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Iterable record queries provide bulk retrieval within endpoint limits; complete account recovery is unverified.

Deals API reference ↗Get all deals; cursor, filters and statusChecked 2026-10-16
What queries can a customer issue outside the provider UI?Documented structured API filtersPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Get all deals; filters and pagination

Deals API reference ↗Get all deals; filters and paginationChecked 2026-10-16
Who decides whether a chosen third party may connect?Customer authorization without discretionary provider approvalPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Private apps; no approval and unlisted installation link

Creating an app ↗Private apps; no approval and unlisted installation linkChecked 2026-10-16
What extra commercial condition applies to the routes supplying the assessed read capability, relative to the lowest paid plan?-Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Plan-based token budget does not establish the complete lowest-plan commercial entitlement

Rate limiting ↗Reviewed route entitlement and plan conditionsChecked 2026-10-16
What permission is needed for the documented downstream use?-Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Downstream processing, AI and redistribution permission require a separate applicable-terms review.

Authentication ↗Authentication documentation reviewed; applicable downstream contractual clause not establishedChecked 2026-10-16
Which external write operations are documented?Create and update in one business domainPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Create a deal; update a deal

Deals API reference ↗Create a deal; update a dealChecked 2026-10-16
How can customers connect an application they build or choose?Customer applications using fixed APIs without provider selectionPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Customer application authentication for the declared route

Authentication ↗Customer application authentication for the declared routeChecked 2026-10-16
What mechanism supports repeatable extraction of changes?Documented updated-since filters or webhooksPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Get all persons; updated_since

Persons API reference ↗Get all persons; updated_sinceChecked 2026-10-16
How are integration limits disclosed?Published numeric quotas and recovery instructionsPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Published numeric limits, rate-limit errors and recovery information

Rate limiting ↗Published numeric limits, rate-limit errors and recovery informationChecked 2026-10-16
Where can a usable data copy be delivered?Customer-held structured files or API recordsPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Customer-held API records are documented; no whole-product custody claim is made.

Deals API reference ↗Get all deals; cursor, filters and statusChecked 2026-10-16
What retrieval rights are documented at cancellation?-Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Post-cancellation retrieval remains unresolved.

Authentication ↗Reviewed technical route; applicable customer termination clause not establishedChecked 2026-10-16
How can customers define their own business logic?External integration code; native business logic portability not establishedPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Customer-built private apps

Creating an app ↗Customer-built private appsChecked 2026-10-16
What rights or portability are documented for custom workflow artifacts?-Pipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Rights to native workflow definitions remain unresolved.

Authentication ↗Reviewed technical route; native artifact ownership and export rights not establishedChecked 2026-10-16
What usable data or native definitions can leave before cancellation?Portable structured records on documented routes; whole-product completeness unverifiedPipedrive CRM / customer API token or unlisted private OAuth app; deals, people and organizations through REST, with general webhooks v2. Public Marketplace approval is a separate distribution route.

Portable records within the declared API scope; complete attachments, history and service configuration are unverified.

Deals API reference ↗Get all deals; cursor, filters and statusChecked 2026-10-16

SOURCES / SCOPE / HISTORY

Sources and open questions

This review is based on the documentation below. Live account behavior and customer-specific agreements haven’t been tested.

Still to confirm

  • Lowest-plan API entitlement and any fixed access charge
  • Downstream processing and customer cancellation clauses
  • Portable native automation rights
  • Durable replay across all supported webhook objects

Documentation

Assessment checked 2026-10-16. Each answer retains its source and applicable route; the check date does not establish live account behavior.