← Back to Grahm AI

Grahm AI API

Build integrations with Grahm AI's ticket management, SOP generation, and AI operations platform. The API uses REST conventions with JSON payloads and standard HTTP methods.

🔑

API Key Auth

Bearer token authentication via Supabase

📡

REST + JSON

Standard HTTP methods with JSON request/response

⚡

Realtime

WebSocket subscriptions for live updates

Base URL

https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1

Edge Functions URL

https://hhcgkdpyytfdjdsubjvp.supabase.co/functions/v1

Authentication

All API requests require two headers: an API key (apikey) and an authorization token (Authorization). Get these from your Grahm AI account settings or the Supabase dashboard.

Headers
apikey: your_supabase_anon_key
Authorization: Bearer your_access_token
Content-Type: application/json
Prefer: return=representation

Getting an access token: Use the Supabase Auth API to sign in with email/password or OAuth. The response includes an access_token you can use in the Authorization header. Tokens expire after 1 hour — use the refresh_token to get a new one.

cURL
JavaScript
Python
# Get an access token
curl -X POST 'https://hhcgkdpyytfdjdsubjvp.supabase.co/auth/v1/token?grant_type=password' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"email":"user@example.com","password":"your_password"}'
const res = await fetch('https://hhcgkdpyytfdjdsubjvp.supabase.co/auth/v1/token?grant_type=password', {
  method: 'POST',
  headers: { 'apikey': ANON_KEY, 'Content-Type': 'application/json' },
  body: JSON.stringify({ email: 'user@example.com', password: 'your_password' })
});
const { access_token } = await res.json();
import requests

res = requests.post(
    'https://hhcgkdpyytfdjdsubjvp.supabase.co/auth/v1/token?grant_type=password',
    headers={'apikey': ANON_KEY, 'Content-Type': 'application/json'},
    json={'email': 'user@example.com', 'password': 'your_password'}
)
access_token = res.json()['access_token']

Rate Limits

API requests are rate limited per user. Current limits:

Plan	Requests/min	AI Calls/month
Free	60	10
Pro	300	Unlimited
Business	600	Unlimited
Enterprise Gold	1200	Unlimited

Error Handling

The API returns standard HTTP status codes. Error responses include a JSON body with an error field.

Code	Meaning
200	Success
201	Created
400	Bad request — check parameters
401	Unauthorized — invalid or missing token
403	Forbidden — insufficient permissions
404	Not found
429	Rate limited — slow down
500	Server error

List Tickets

GET /gt_tickets?board_id=eq.{board_id}

Retrieve all tickets for a board. Supports filtering, sorting, and pagination via query parameters.

Query Parameters

Parameter	Type	Description
board_id	uuidrequired	Filter by board ID
status	string	Filter by status (eq.New, eq.Resolved, etc.)
priority	string	Filter by priority (eq.Critical, eq.High, etc.)
order	string	Sort field (e.g. created_at.desc)
limit	integer	Max results (default: 100)

cURL
JavaScript
curl 'https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1/gt_tickets?board_id=eq.YOUR_BOARD_ID&order=created_at.desc&limit=50' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_TOKEN'
const res = await fetch(
  `${SUPABASE_URL}/rest/v1/gt_tickets?board_id=eq.${boardId}&order=created_at.desc`,
  { headers: { 'apikey': ANON_KEY, 'Authorization': `Bearer ${token}` } }
);
const tickets = await res.json();

Create Ticket

POST /gt_tickets

Create a new ticket on a board.

Body Parameters

Field	Type	Description
board_id	uuidrequired	Board to create ticket on
title	stringrequired	Ticket title/subject
description	string	Detailed description
priority	string	Critical, High, Medium, Low (default: Medium)
category	string	Hardware, Software, Network, Access, Account, General
requester_name	string	Name of the person requesting
requester_email	string	Email for notifications
assignee_name	string	Assign to a team member
source	string	manual, form, email, api, csv (default: api)

cURL
JavaScript
Python
curl -X POST 'https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1/gt_tickets' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -H 'Prefer: return=representation' \
  -d '{
    "board_id": "YOUR_BOARD_ID",
    "title": "VPN not connecting",
    "description": "Cannot connect to VPN from home office",
    "priority": "High",
    "category": "Network",
    "requester_name": "John Doe",
    "requester_email": "john@company.com",
    "source": "api"
  }'
const res = await fetch(`${SUPABASE_URL}/rest/v1/gt_tickets`, {
  method: 'POST',
  headers: {
    'apikey': ANON_KEY,
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json',
    'Prefer': 'return=representation'
  },
  body: JSON.stringify({
    board_id: boardId,
    title: 'VPN not connecting',
    description: 'Cannot connect from home office',
    priority: 'High',
    category: 'Network',
    source: 'api'
  })
});
const ticket = (await res.json())[0];
import requests

res = requests.post(
    'https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1/gt_tickets',
    headers={
        'apikey': ANON_KEY,
        'Authorization': f'Bearer {token}',
        'Content-Type': 'application/json',
        'Prefer': 'return=representation'
    },
    json={
        'board_id': board_id,
        'title': 'VPN not connecting',
        'priority': 'High',
        'source': 'api'
    }
)
ticket = res.json()[0]

Update Ticket

PATCH /gt_tickets?id=eq.{ticket_id}

Update ticket fields. Only send the fields you want to change.

curl -X PATCH 'https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1/gt_tickets?id=eq.TICKET_ID' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -H 'Prefer: return=representation' \
  -d '{"status":"Resolved","priority":"Low"}'

Delete Ticket

DELETE /gt_tickets?id=eq.{ticket_id}

Permanently delete a ticket and all associated comments, activity, and attachments.

curl -X DELETE 'https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1/gt_tickets?id=eq.TICKET_ID' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_TOKEN'

Get Ticket

GET /gt_tickets?id=eq.{ticket_id}

Retrieve a single ticket by ID.

curl 'https://hhcgkdpyytfdjdsubjvp.supabase.co/rest/v1/gt_tickets?id=eq.TICKET_ID&select=*' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_TOKEN'

List Comments

GET /gt_ticket_comments?ticket_id=eq.{ticket_id}

Get all comments for a ticket, ordered by creation time.

Add Comment

POST /gt_ticket_comments

Add a comment to a ticket.

Field	Type	Description
ticket_id	uuidrequired	Ticket to comment on
body	stringrequired	Comment text
is_internal	boolean	Internal note (hidden from portal)

AI Triage ★ ENTERPRISE GOLD

POST /functions/v1/ai-proxy

Send a ticket for AI analysis. Returns suggested priority, category, sentiment, summary, and a draft reply.

curl -X POST 'https://hhcgkdpyytfdjdsubjvp.supabase.co/functions/v1/ai-proxy' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ticket-triage",
    "title": "VPN not connecting",
    "description": "Cannot connect from home office since this morning"
  }'

Response

{
  "priority": "High",
  "category": "Network",
  "sentiment": "Frustrated",
  "summary": "User unable to connect to company VPN...",
  "suggested_reply": "Hi, thank you for reporting this..."
}

Ticket → SOP ★ ENTERPRISE GOLD

POST /functions/v1/ai-proxy

Convert a resolved ticket into a Standard Operating Procedure (SOP) document.

curl -X POST 'https://hhcgkdpyytfdjdsubjvp.supabase.co/functions/v1/ai-proxy' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ticket-to-sop",
    "title": "VPN Connection Troubleshooting",
    "description": "Steps to fix VPN connectivity issues...",
    "comments": [{"author":"Agent","body":"Restarted VPN service..."}]
  }'

Webhook Events

Configure webhooks in Grahm Tickets → Webhooks button to receive real-time notifications. Supports Slack, Microsoft Teams, Discord, and custom endpoints.

Event	Trigger	Payload Includes
ticket_created	New ticket created	Full ticket object
status_changed	Ticket status updated	Ticket + old/new status
assigned	Assignee changed	Ticket + old/new assignee
sla_breach	SLA deadline exceeded	Ticket + SLA details
comment_added	New comment posted	Ticket + comment body
ticket_resolved	Status set to Resolved	Full ticket object

Submit Ticket (Public)

Public endpoint for external ticket submission — no authentication required. Used by the public intake form.

POST /functions/v1/public-ticket-submit

curl -X POST 'https://hhcgkdpyytfdjdsubjvp.supabase.co/functions/v1/public-ticket-submit' \
  -H 'Content-Type: application/json' \
  -d '{
    "form_slug": "it-support",
    "name": "Jane Doe",
    "email": "jane@company.com",
    "subject": "Printer not working",
    "category": "Hardware",
    "priority": "Medium",
    "description": "The printer on the 3rd floor..."
  }'

Portal Lookup (Public)

POST /functions/v1/public-ticket-submit

Look up tickets by requester email — used by the customer portal.

curl -X POST 'https://hhcgkdpyytfdjdsubjvp.supabase.co/functions/v1/public-ticket-submit' \
  -H 'Content-Type: application/json' \
  -d '{"action":"lookup","email":"jane@company.com"}'

API Playground

Test API calls directly from this page. Enter your credentials and try it out.

🧪 Try It Live

Supabase Anon Key

Access Token

Method

Endpoint Path

Request Body (JSON — for POST/PATCH)

Need help? Contact grahm.ai001@gmail.com