Customer.io Send Messages API
Use these endpoints to send broadcasts or transactional messages to your audience. They use the same authentication method, but review the limits for both types of workflows to make sure you'll successfully trigger your messages.You can't trigger campaigns through our APIs.## API triggered broadcast limitsWhile [API triggered broadcasts](#operation/triggerBroadcast) are limited to 1 request every 10 seconds, they're also limited by the number of triggers you can have queued at a time, as shown in the table below.| Data Type | Limit | Description || -- | -- | -- || Trigger Payload | 25MB | Max length of the entire Trigger call, larger calls are typically to support `per_user_data` || Trigger Data | 50000 bytes | Max length of the data section in the Trigger call || Recipient List1 | 10000 recipients | Max number of ids or emails included in the Trigger call || Custom Per User Data1 | 10000 entries | Max number of entries in `per_user_data` || Custom Per User Data1 | 2MB | Max length per user in the file referenced by `data_file_url`. || Custom Per User Data1 | 10GB | Max length of the entire size of the file referenced by `data_file_url` || Trigger Queue | 5 triggers | Max number of triggers waiting to be processed consecutively |1For larger data sets, use `data_file_url` to supply a link to a file that contains your merge data. Attempting to send too much data in a single API call will fail.## Transactional Message LimitsThe `/send-*` endpoints are limited to 100 requests per second.| Data Type | Limit | Description || -- | -- | -- || Payload | 1MB | Max length of the payload, excepting attachments || Attachments (email) | 2MB | Maximum size of attachments || Recipients | 15 | Total number of recipients across the `to`, `cc`, and `bcc` fields. |
Customer.io Send Messages API is one of 42 APIs that Customer.io publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Send Messages. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.
This API exposes 8 operations across 8 paths. It is described by OpenAPI 3.2.0, at version 1.0.0.
Requests are made against 2 base URLs: https://api.customer.io, https://api-eu.customer.io.
Metadata
The identity and technical contract details declared by the specification.
Authentication & Security 3
Customer.io Send Messages API declares
3 security schemes
for authenticating requests.
It accepts HTTP bearer tokens (Bearer-Auth).
It accepts HTTP bearer tokens (sa_live_) (ServiceAccount-Auth).
It accepts HTTP bearer tokens (bearerAuth).
Bearer-Auth— The App API uses a bearer authentication scheme. You can generate a bearer token, known as an App API Key, with a defined scope in [your account settings](http…ServiceAccount-Auth— Transactional send endpoints (/v1/send/email, /v1/send/push, /v1/send/sms, /v1/send/inapp, /v1/send/inboxmessage) also accept a service-account bearer token, p…bearerAuth— API key passed as a Bearer token
Paths & Operations 8
Across 8 paths, the API surfaces 8 operations — 8 POST. Each is listed below with its method, path, parameters, and response codes.
Use these endpoints to send broadcasts or transactional messages to your audience. They use the same authentication method, but review the limits for both types of workflows to ma…
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from Customer.io 12
Other APIs Customer.io publishes across the network.
This is an independent, third-party profile of Customer.io Send Messages API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.