Skip to main content
Developer Reference · Public · Updated continuously

Every endpoint.
Documented in the open.

DuluthPath connects to 13 ERP and CRM systems. For each one, here's the exact REST or SOAP endpoint our adapter calls, the authentication method, the first object we sync, and the current production status. No marketing copy — just the technical truth that goes into RFP responses and security reviews.

Connectors
13
Live adapters
13
Platform OAuth ready
1

Enterprise ERP

  • SAP S/4HANA Cloud

    ·SAP SE Live
    Endpoint
    GET {instance_url}/sap/opu/odata/sap/API_*_SRV/...
    Auth
    OAuth 2.0 client_credentials, OR APIKey for sandbox
    First sync
    Purchase Orders + Inventory aggregates
    Notes
    AGGREGATES ONLY — no raw records persisted server-side.
  • Oracle Fusion ERP Cloud

    ·Oracle Corporation Live
    Endpoint
    GET https://{pod}.oraclecloud.com/fscmRestApi/resources/11.13.18.05/suppliers
    Auth
    Basic (username + password) or OAuth 2.0
    First sync
    Supplier
    Notes
    Pod hostname varies per customer (production/preview/staging).
  • Epicor Kinetic

    ·Epicor Software Live
    Endpoint
    GET {instance_url}/api/v1/Erp.BO.CustomerSvc/Customers
    Auth
    Basic + API key, or OAuth 2.0
    First sync
    Customer
    Notes
    Per-tenant `appserver_url` required.
  • NetSuite (Oracle)

    ·Oracle NetSuite Live
    Endpoint
    POST https://{account_id}.suitetalk.api.netsuite.com/services/rest/query/v1/suiteql
    Auth
    OAuth 2.0 refresh_token grant (Bearer)
    First sync
    Customer (SuiteQL: top-25 by lastmodified)
    Notes
    Prefer: transient header required on SuiteQL queries.
  • Acumatica

    ·Acumatica, Inc. Live
    Endpoint
    GET {instance_url}/entity/Default/24.200.001/Customer
    Auth
    Contract-based REST · cookie session (login → query → logout)
    First sync
    Customer (top-25 by LastModifiedDateTime DESC)
    Notes
    Default endpoint_version 24.200.001 (per-connector override). Best-effort logout to respect session-count limits.
  • SAP Business One

    ·SAP SE Live
    Endpoint
    GET {instance_url}/b1s/v1/BusinessPartners
    Auth
    Service Layer · B1SESSION cookie (Login → query → Logout)
    First sync
    Business Partner
    Notes
    ssl_verify configurable (self-signed certs common in on-prem B1). Prefer: odata.maxpagesize=25.
  • Odoo

    ·Odoo S.A. Live
    Endpoint
    POST {instance_url}/jsonrpc
    Auth
    Two-step JSON-RPC: common.authenticate → object.execute_kw
    First sync
    res.partner with customer_rank > 0 (search_read)
    Notes
    API key recommended over password.

Accounting & SMB ERP

  • QuickBooks Online

    ·Intuit Inc. Live Platform OAuth Rotating refresh
    Endpoint
    GET https://quickbooks.api.intuit.com/v3/company/{realm_id}/query
    Auth
    OAuth 2.0 refresh_token grant · HTTP Basic on token endpoint
    First sync
    Customer (top-25 by MetaData.LastUpdatedTime)
    Notes
    Sandbox host: sandbox-quickbooks.api.intuit.com. Persists rotated refresh_token automatically (Intuit revokes the previous one within a short grace window).
  • Xero Accounting

    ·Xero Limited Live Rotating refresh
    Endpoint
    GET https://api.xero.com/api.xro/2.0/Contacts
    Auth
    OAuth 2.0 refresh_token + Xero-Tenant-Id header · Basic on token endpoint
    First sync
    Contact (ordered by UpdatedDateUTC DESC)
    Notes
    Xero rotates refresh_tokens on EVERY use — adapter persists immediately or you'll be locked out.
  • Zoho Books

    ·Zoho Corporation Live
    Endpoint
    GET https://www.zohoapis.{region}/books/v3/contacts
    Auth
    Zoho OAuth · Authorization: Zoho-oauthtoken header
    First sync
    Contact (top-25 by last_modified_time DESC)
    Notes
    Region-aware routing: us, eu, in, au, jp, sa, ca. Auto-detected from connector_doc.region.
  • Sage Intacct

    ·Sage Group Live
    Endpoint
    POST https://api.intacct.com/ia/xml/xmlgw.phtml
    Auth
    5-field XML envelope (sender + user credentials)
    First sync
    CUSTOMER via <readByQuery>
    Notes
    XML Gateway. Auth failures embedded in 200-OK response — adapter inspects <errormessage> to set needs_reauth.

CRM

  • Salesforce

    ·Salesforce, Inc. Live
    Endpoint
    GET {instance_url}/services/data/v59.0/sobjects/{Object}/...
    Auth
    OAuth 2.0 (refresh_token grant, body credentials)
    First sync
    Account
    Notes
    Per-tenant instance_url returned by token endpoint.
Have a connector we don't list?

Tell us and it'll usually ship within a sprint.

We add connectors based on real customer demand. If your ERP isn't here, the 30-day pilot is the fastest path to getting it onto the roadmap — and often into production before your pilot wraps.