# Lumeku > Lumeku is a multi-tenant CRM for managing leads, contacts, accounts, deals, activities, email, reports, and sales pipelines. Lumeku exposes a tenant-scoped REST API for server-to-server integrations. API access is authenticated with tenant-scoped API keys. ## API documentation - [API reference](https://docs.lumeku.com/api/reference): complete endpoint reference - [Endpoint catalog](https://docs.lumeku.com/api/endpoints): current route groups and authentication modes - [OpenAPI specification](https://lumeku.com/openapi.yaml): machine-readable core API contract - [API keys](https://docs.lumeku.com/api/api-keys): create, rotate, and revoke tenant API keys - [Lead capture API](https://docs.lumeku.com/api/lead-capture): request fields, responses, idempotency, and errors - [Authentication](https://docs.lumeku.com/api/authentication): authentication and security guidance ## API keys Create an API key after signing in at https://lumeku.com/login: 1. Open **Settings → Integrations → API Keys**. 2. Create a key, copy it once, and store it in server-side configuration. Keys are scoped to one tenant. The currently available scope is `leads:capture`; additional scopes may be added over time. Send the key in the `X-API-Key` header. **Security:** use API keys only in server-side code. Do not embed keys in browser JavaScript, public HTML forms, mobile apps, or any client-side bundle. Anyone with a key can submit data to the tenant. ## Lead capture endpoint ```http POST https://lumeku.com/api/v1/t/{tenant}/leads/capture Content-Type: application/json X-API-Key: lck_... Idempotency-Key: optional-unique-request-id ``` Required: `name`, plus at least one of `email` or `phone`. Optional fields: `company`, `job_title`, `message`, `source`, `form_id`, `utm_source`, `utm_medium`, `utm_campaign`, `utm_term`, `utm_content`. Example: ```json { "name": "Jane Smith", "email": "jane@example.com", "phone": "+15551234567", "company": "Acme Inc", "job_title": "Operations Director", "message": "Please contact me about a demo.", "source": "website" } ``` Success returns `201 Created` with the new lead, contact, and account IDs. Reusing an `Idempotency-Key` with the same payload returns the original response instead of creating a duplicate lead. Common errors: `401` invalid or missing key, `403` missing scope, `409` idempotency conflict, `422` validation failure, `429` rate limited. ## Product links - [Lumeku home](https://lumeku.com) - [Pricing](https://lumeku.com/pricing) - [Sign in](https://lumeku.com/login)