How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Customer.io Send Messages API

Use these endpoints to send broadcasts or transactional messages to your audience. They use the same authentication method, but review the limits for both types of workflows to make sure you'll successfully trigger your messages.You can't trigger campaigns through our APIs.## API triggered broadcast limitsWhile [API triggered broadcasts](#operation/triggerBroadcast) are limited to 1 request every 10 seconds, they're also limited by the number of triggers you can have queued at a time, as shown in the table below.| Data Type | Limit | Description || -- | -- | -- || Trigger Payload | 25MB | Max length of the entire Trigger call, larger calls are typically to support `per_user_data` || Trigger Data | 50000 bytes | Max length of the data section in the Trigger call || Recipient List1 | 10000 recipients | Max number of ids or emails included in the Trigger call || Custom Per User Data1 | 10000 entries | Max number of entries in `per_user_data` || Custom Per User Data1 | 2MB | Max length per user in the file referenced by `data_file_url`. || Custom Per User Data1 | 10GB | Max length of the entire size of the file referenced by `data_file_url` || Trigger Queue | 5 triggers | Max number of triggers waiting to be processed consecutively |1For larger data sets, use `data_file_url` to supply a link to a file that contains your merge data. Attempting to send too much data in a single API call will fail.## Transactional Message LimitsThe `/send-*` endpoints are limited to 100 requests per second.| Data Type | Limit | Description || -- | -- | -- || Payload | 1MB | Max length of the payload, excepting attachments || Attachments (email) | 2MB | Maximum size of attachments || Recipients | 15 | Total number of recipients across the `to`, `cc`, and `bcc` fields. |

Customer.io Send Messages API is one of 42 APIs that Customer.io publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Send Messages. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 8 operations across 8 paths. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against 2 base URLs: https://api.customer.io, https://api-eu.customer.io.

8 operations 8 paths 0 schemas 8 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://track.customer.io
Authentication
HTTP Bearer, HTTP Bearer, HTTP Bearer
Resource Areas
1

Authentication & Security 3

Customer.io Send Messages API declares 3 security schemes for authenticating requests. It accepts HTTP bearer tokens (Bearer-Auth). It accepts HTTP bearer tokens (sa_live_) (ServiceAccount-Auth). It accepts HTTP bearer tokens (bearerAuth).

  • Bearer-Auth — The App API uses a bearer authentication scheme. You can generate a bearer token, known as an App API Key, with a defined scope in [your account settings](http…
  • ServiceAccount-Auth — Transactional send endpoints (/v1/send/email, /v1/send/push, /v1/send/sms, /v1/send/inapp, /v1/send/inboxmessage) also accept a service-account bearer token, p…
  • bearerAuth — API key passed as a Bearer token

Paths & Operations 8

Across 8 paths, the API surfaces 8 operations — 8 POST. Each is listed below with its method, path, parameters, and response codes.

Send Messages 8

Use these endpoints to send broadcasts or transactional messages to your audience. They use the same authentication method, but review the limits for both types of workflows to ma…

POST
/v1/campaigns/{broadcast_id}/triggers
Send an API-triggered broadcast
triggerBroadcast 1 param body → 200401404422
POST
/v1/newsletters/{newsletter_id}/send
Send a newsletter
sendNewsletter 1 param body → 200400404422429
POST
/v1/newsletters/{newsletter_id}/schedule
Schedule a newsletter
scheduleNewsletter 1 param body → 200400404422429
POST
/v1/send/email
Send a transactional email
sendEmail 1 param body → 200400403413
POST
/v1/send/in_app
Send a transactional in-app message
sendInApp 1 param body → 200400403
POST
/v1/send/inbox_message
Send a transactional inbox message
sendInboxMessage 1 param body → 200400403
POST
/v1/send/push
Send a transactional push
sendPush 1 param body → 200400403
POST
/v1/send/sms
Send a transactional SMS
sendSMS 1 param body → 200400403

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

customer-io-send-messages-api-openapi.yml Raw ↑

Other APIs Customer.io publishes across the network.

Customer.io Track API
Customer.io Activities API
Customer.io Alias API
Customer.io Batch API
Customer.io Broadcasts API
Customer.io Campaigns API
Customer.io Collections API
Customer.io Customers API
Customer.io Exports API
Customer.io Group API
Customer.io Identify API
Customer.io Messages API
Where this information came from

This is an independent, third-party profile of Customer.io Send Messages API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.