OneApp Partner API

Read-only access to the applicant, resident and default reports for your authorized portfolio.

Environments

Environment	Base URL	Data
Sandbox	`https://sandbox-api.oneapp.rentals`	Synthetic test data only
Production	`https://api.oneapp.rentals`	Your live portfolio

Sandbox and Production use separate credentials. Build and test against Sandbox first.

Authentication

We issue you a client ID and client secret for each environment, together with the token URL to use. The secret is shown once; store it like a password.
Exchange them for an access token with the OAuth 2.0 client credentials grant, requesting the scopes you need.
Send the token on every request as Authorization: Bearer <token>. Tokens expire after one hour; request a new one before then rather than per call.

Scopes

Scope	Grants
`partner-data/applicants.read`	`GET /api/partner/v1/applicants`
`partner-data/residents.read`	`GET /api/partner/v1/residents`
`partner-data/defaults.read`	`GET /api/partner/v1/defaults`

Errors and rate limits

401: the token is missing, invalid or expired. Request a new token.
403: the token lacks the scope for this endpoint, or the requested property is outside your portfolio.
429: you are being rate limited. Retry with exponential backoff and jitter.