Quick Start

What you can do

The Unduit API lets you integrate enterprise-grade mobile device management into your platform. Manage repairs, recycling, and buyback services programmatically — employees, assets, orders, recoveries, ticketing, and more are available under /api/v1.

All protected endpoints require a Bearer token. Your first step is always to call POST api/v1/auth/login with your API credentials.

Step 1 — Login and get a token

Send a POST request to the login endpoint with your credentials in the JSON body. No Authorization header is required for this call.

curl --location 'https://uat.unduit.com/api-exposed/api/v1/auth/login' \
  --header 'Content-Type: application/json' \
  --data-raw '{
    "client_id": "your-email@example.com",
    "client_secret": "your-client-secret"
  }'

{
  "message": "Login successful",
  "token": "YOUR_ACCESS_TOKEN_HERE"
}

Step 2 — Make your first API call

Pass the token from Step 1 in the Authorization header. This example lists employees in your organization:

curl -X GET 'https://uat.unduit.com/api-exposed/api/v1/employees?page=1&limit=10' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json'

What's next

Tokens expire after 4 hours. Use the refresh-token endpoint to obtain a new token without re-entering credentials. See the guides below for full authentication details, base URL environments, and API conventions.