Pipedrive
CRMsystem_type: "pipedrive"Proxy Pipedrive CRM API calls for deals, persons, organisations, and activities.
Overview#
The Pipedrive connector proxies REST API v1 calls with PQC-sealed API tokens. Pipedrive's straightforward API token authentication makes it one of the fastest connectors to configure.
https://api.quantaseal.io/api/v2/proxy/outboundAuth header:
X-API-Key: qs_live_…Prerequisites#
- 1A Pipedrive account with API access
- 2API token from Settings → Personal Preferences → API
- 3A QuantaSeal API key
Configuration#
Follow these steps to connect Pipedrive to QuantaSeal. You can configure integrations via the Admin Console or directly via the API.
- 1
In Pipedrive, go to Settings → Personal Preferences → API and copy your API token.
- 2
Seal the token: POST /api/v2/vault/seal with credential_type: api_key.
- 3
Create integration: POST /api/v2/integrations with system_type: pipedrive.
Authentication Types#
Pipedrive uses a simple API token appended as a query parameter. Seal the token as api_key in QuantaVault.
All credential types are sealed in QuantaVault with ML-KEM-768 + AES-256-GCM and wrapped by your tenant AWS KMS CMK before storage. See the Vault API reference for the full list of credential types and seal/unseal endpoints.
Available Operations#
QuantaSeal enforces a default-deny operation policy. Only operations listed in your integration's allowed_operations array will be permitted. Add operations when creating or updating the integration.
| Operation | Description |
|---|---|
get_deal | Retrieve a deal by ID. |
create_deal | Create a new deal. |
get_person | Retrieve a person (contact) by ID. |
search | Search across deals, persons, organisations. |
list_activities | List activities for a deal or person. |
Code Example#
Every proxy call returns a HybridCryptoEnvelope - the response is ML-KEM-768 key-encapsulated, AES-256-GCM encrypted, and signed with ML-DSA-65 + HMAC-SHA-512. Verify both signatures before trusting the decrypted payload.
curl -X POST https://api.quantaseal.io/api/v2/proxy/outbound \
-H "X-API-Key: qs_live_your_key_here" \
-H "Content-Type: application/json" \
-d '{"integration_id":"int_PIPE001","operation":"get_deal","payload":{"deal_id":42}}'client.encryption.decrypt(envelope). Both the ML-DSA-65 signature and the HMAC-SHA-512 signature must pass - QuantaSeal uses a bitwise & check, not short-circuit and.Troubleshooting#
401 Unauthorized
The Pipedrive API token is invalid or has been reset. Rotate the vault credential with POST /api/v2/vault/rotate/{id}.