SDKs and Libraries

Overview

TotalApp exposes a fully documented REST API (see API Documentation) that any HTTP client can call directly. The SDKs below wrap the raw HTTP layer with idiomatic language bindings, automatic token refresh, type-safe request/response models, and built-in retry logic so you can focus on building rather than plumbing.

JavaScript / TypeScript

The official TotalApp JS/TS client is the same apiFetch utility used by the TotalApp React frontend itself — thin, dependency-free, and fully typed.

Installation

npm install @totalapp/client

Quick Start

import { TotalAppClient } from '@totalapp/client';

const client = new TotalAppClient({
  baseUrl: 'https://app.totalapp.app',
  token: process.env.TOTALAPP_JWT,
});

// Fetch employees
const employees = await client.employees.list();

// Create a project
const project = await client.projects.create({
  title: 'Q3 Roadmap',
  description: 'Planning cycle for Q3',
});

Key Modules

Python

The Python library targets Python 3.9+ and uses httpx under the hood for async-first operation. A synchronous wrapper is also provided for scripts and notebooks.

Installation

pip install totalapp-client

Quick Start (async)

import asyncio
from totalapp import TotalAppClient

async def main():
    async with TotalAppClient(token=os.environ["TOTALAPP_JWT"]) as client:
        employees = await client.employees.list()
        for emp in employees:
            print(emp.name, emp.department)

asyncio.run(main())

Quick Start (sync)

from totalapp.sync import TotalAppClient

client = TotalAppClient(token=os.environ["TOTALAPP_JWT"])
projects = client.projects.list()
print(projects[0].title)

REST API — cURL Examples

No SDK installed? You can call any TotalApp endpoint directly with any HTTP client. Replace $TOKEN with your app JWT.

List employees

curl -H "Authorization: Bearer $TOKEN" \
  https://app.totalapp.app/api/data/employees

Create a leave request

curl -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"employeeId":"emp-001","type":"annual","startDate":"2026-07-14","endDate":"2026-07-18","reason":"Summer holiday"}' \
  https://app.totalapp.app/api/data/leaves

Trigger a Claude AI generation

curl -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"command":"write-blog","topic":"10 productivity tips for remote teams","apiMode":"api"}' \
  https://app.totalapp.app/api/claude

Webhook Verification Helper

TotalApp signs every outbound webhook request with an HMAC-SHA256 signature in the X-TotalApp-Signature header. Use the verification helper to confirm payloads are genuine before processing them.

Node.js

import { verifyWebhookSignature } from '@totalapp/client/webhooks';

app.post('/my-webhook', (req, res) => {
  const isValid = verifyWebhookSignature({
    payload: req.body,          // raw Buffer
    signature: req.headers['x-totalapp-signature'],
    secret: process.env.WEBHOOK_SECRET,
  });
  if (!isValid) return res.status(401).send('Invalid signature');
  // process req.body ...
  res.sendStatus(200);
});

Python

from totalapp.webhooks import verify_signature

@app.route('/webhook', methods=['POST'])
def handle_webhook():
    valid = verify_signature(
        payload=request.get_data(),
        signature=request.headers.get('X-TotalApp-Signature'),
        secret=os.environ['WEBHOOK_SECRET']
    )
    if not valid:
        abort(401)
    data = request.get_json()
    # process data ...
    return '', 200

Rate Limits & Best Practices

Frequently Asked Questions