Menu

API reference · CRM

Products

crm · products · 9 operations

GET/v1/crm/products

List the CRM products (the catalog deal quotes are built from)

crm.products.list

ReadIdempotentSince 2026-11-01

Lists the org's manually curated products (the ones deal quotes are built from) in the same manual order as the settings screen, paginated by cursor (limit up to 200). Archived products are left out unless include_archived is true (the page is filled skipping them). Each product says who created it (created_by_name). Each product carries its default price, currency, billing frequency (one_time or monthly), tax, SKU and custom fields. Synced feed catalogs are a different thing: see crm.catalogs.list.

Scope
crm:read
Permission
View the module
MCP tool
crm_products_listOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.list".

Declared cost: up to 202 reads and 0 writes per call (they count against the daily quota).

Parameters

limitintegerqueryoptional

Products per call, 1 to 200 (default 50).

Default: 50

cursorstringqueryoptional

next_cursor of the previous page.

include_archivedbooleanqueryoptional

Include archived products (default false).

Response

dataarray<object>
has_moreboolean
next_cursorstring

Errors

Example

curl "https://api.mb-suite.com/v1/crm/products" \
  -H "Authorization: Bearer $MB_API_KEY"

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl "https://api.mb-suite.com/v1/crm/products" \
  -H "Authorization: Bearer $MB_TEST_KEY"
GET/v1/crm/products/{product_id}

Get one CRM product

crm.products.get

ReadIdempotentSince 2026-11-01

Returns one product of the org's product list (name, default price, currency, frequency, tax, description, SKU, image, custom fields, archived flag and order). Not found if the id does not exist. Use crm.products.list when you do not know the id.

Scope
crm:read
Permission
View the module
MCP tool
crm_products_getOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.get".

Declared cost: up to 1 reads and 0 writes per call (they count against the daily quota).

Parameters

product_idstringpathrequired

The product's id, from crm.products.list.

Response

idstring
namestring
default_pricenumber
default_frequencyenum

Values: one_time, monthly

is_archivedboolean
ordernumber
org_idstring
currencystring | null
taxnumber | null
descriptionstring | null
skustring | null
image_urlstring | null
custom_fieldsobject
archived_atnumber | null
archived_by_idstring | null
created_atnumber
updated_atnumber
created_by_idstring
created_by_namestring | null

Who created it, as the CRM team shows the name.

Errors

Example

curl "https://api.mb-suite.com/v1/crm/products/{product_id}" \
  -H "Authorization: Bearer $MB_API_KEY"

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl "https://api.mb-suite.com/v1/crm/products/{product_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY"
POST/v1/crm/products

Create a CRM product

crm.products.create

WriteSince 2026-11-01

Adds a product at the end of the org's product list with a name and, optionally, default price (0 if omitted), currency (ISO code; without it the workspace's main currency applies), frequency (one_time by default, or monthly), tax percentage, description, SKU, image URL and up to 50 custom fields. Deal quotes copy these values when a line is added; editing the product later does not change existing quotes. Requires manage_products (owners, admins and CRM admins).

Scope
crm:write
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_createOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.create".

Declared cost: up to 1 reads and 1 writes per call (they count against the daily quota).

Parameters

namestringbodyrequired

Name, up to 160 characters.

default_pricenumberbodyoptional

Default unit price (0 or more) that a quote line copies. Default 0.

currencystringbodyoptional

ISO 4217 code (USD, ARS…); without it the workspace's main currency applies.

default_frequencyenumbodyoptional

one_time or monthly (a monthly line adds to the deal's MRR). Default one_time.

Values: one_time, monthly

taxnumberbodyoptional

Tax rate as a percentage, 0 to 100 (21 = 21 %).

descriptionstringbodyoptional

Description, up to 2000 characters.

skustringbodyoptional

SKU or internal code.

image_urlstring (uri)bodyoptional

Image URL (absolute).

custom_fieldsobjectbodyoptional

Extra fields of the product, up to 50 keys with scalar values.

Response

product_idstring

Errors

Example

curl -X POST "https://api.mb-suite.com/v1/crm/products" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "name": "NAME"
}'

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X POST "https://api.mb-suite.com/v1/crm/products" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "name": "NAME"
}'
PATCH/v1/crm/products/{product_id}

Update a CRM product

crm.products.update

WriteIdempotentSince 2026-11-01

Updates one or more fields of a product: name, default price, currency, frequency, tax, description, SKU, image URL or custom fields. Pass null on currency, tax, description, sku, image_url or custom_fields to clear them. Existing deal quotes keep the values they copied. Fails with no_changes if nothing is sent. Requires manage_products.

Scope
crm:write
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_updateOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.update".

Declared cost: up to 1 reads and 1 writes per call (they count against the daily quota).

Parameters

product_idstringpathrequired

The product's id, from crm.products.list.

namestringbodyoptional

Name, up to 160 characters.

default_pricenumberbodyoptional

Default unit price (0 or more) that a quote line copies.

currencystring | nullbodyoptional

ISO 4217 code (USD, ARS…); without it the workspace's main currency applies. null clears it.

default_frequencyenumbodyoptional

one_time or monthly (a monthly line adds to the deal's MRR).

Values: one_time, monthly

taxnumber | nullbodyoptional

Tax rate as a percentage, 0 to 100 (21 = 21 %). null clears it.

descriptionstring | nullbodyoptional

Description, up to 2000 characters. null clears it.

skustring | nullbodyoptional

SKU or internal code. null clears it.

image_urlstring (uri) | nullbodyoptional

Image URL (absolute). null clears it.

custom_fieldsobject | nullbodyoptional

Extra fields of the product, up to 50 keys with scalar values. The whole map; null clears it.

Response

oktrue

Errors

Example

curl -X PATCH "https://api.mb-suite.com/v1/crm/products/{product_id}" \
  -H "Authorization: Bearer $MB_API_KEY"

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X PATCH "https://api.mb-suite.com/v1/crm/products/{product_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY"
POST/v1/crm/products/reorder

Reorder the CRM product list

crm.products.reorder

WriteIdempotentSince 2026-11-01

Sets the manual order of the product list: each id in ordered_ids gets its position as order (up to 2000 ids, usually the full list as shown). An id that does not exist fails with product_not_found. Not audited, like every reorder. Requires manage_products.

Scope
crm:write
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_reorderOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.reorder".

Declared cost: up to 0 reads and 2000 writes per call (they count against the daily quota).

Parameters

ordered_idsarray<string>bodyrequired

Product ids (crm.products.list) in the new order, usually the whole list, up to 2000.

Response

oktrue

Errors

Example

curl -X POST "https://api.mb-suite.com/v1/crm/products/reorder" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "ordered_ids": [
    "ORDERED_ID"
  ]
}'

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X POST "https://api.mb-suite.com/v1/crm/products/reorder" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "ordered_ids": [
    "ORDERED_ID"
  ]
}'
POST/v1/crm/products/{product_id}/archive

Archive or unarchive a CRM product

crm.products.archive

WriteIdempotentSince 2026-11-01

Archives (is_archived: true) or unarchives (false) a product. An archived product stays referenceable by existing quotes but is hidden from the product picker and from crm.products.list unless include_archived is set. This is NOT the trash (see crm.products.delete). Requires manage_products.

Scope
crm:write
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_archiveOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.archive".

Declared cost: up to 1 reads and 1 writes per call (they count against the daily quota).

Parameters

product_idstringpathrequired

The product's id, from crm.products.list.

is_archivedbooleanbodyrequired

true archives it (hidden from the product picker), false brings it back.

Response

oktrue

Errors

Example

curl -X POST "https://api.mb-suite.com/v1/crm/products/{product_id}/archive" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "is_archived": true
}'

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X POST "https://api.mb-suite.com/v1/crm/products/{product_id}/archive" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "is_archived": true
}'
DELETE/v1/crm/products/{product_id}

Delete a CRM product

crm.products.delete

IrreversibleSince 2026-11-01

Deletes a product from the org's list. It goes to the 30-day trash: restore it with platform.trash.restore (or from CRM settings → Trash); deal quotes that used it keep their own copy of the line. Prefer crm.products.archive when it should just stop being offered. Requires manage_products.

With an API key, this DELETE runs directly: the record stays 30 days in the trash and the response carries its trash_item_id. With an OAuth token, and through the MCP, it needs dry_run → confirm_token.

Scope
crm:write and “Allow deletions” (crm:delete in OAuth)
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_deleteOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.delete".

Declared cost: up to 1 reads and 2 writes per call (they count against the daily quota).

Parameters

product_idstringpathrequired

The product's id, from crm.products.list.

Response

oktrue
trash_item_idstring

The trash item this deletion left: the item_id of platform.trash.restore (POST /trash/{item_id}/restore). Missing if nothing went to the trash.

trash_item_idsarray<string>

Only when the deletion left more than one copy: all of them, the first being trash_item_id.

trash_expires_atnumber

When the copy leaves the trash for good (epoch ms): 30 days after the deletion.

Errors

Example

curl -X DELETE "https://api.mb-suite.com/v1/crm/products/{product_id}" \
  -H "Authorization: Bearer $MB_API_KEY"

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X DELETE "https://api.mb-suite.com/v1/crm/products/{product_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY"
POST/v1/crm/products/bulk/archive

Archive or unarchive many CRM products

crm.products.bulk.archive

WriteBulk · up to 500IdempotentSince 2026-11-01

Archives (is_archived: true) or unarchives (false) up to 500 products at once. Ids that do not exist are skipped and counted in missing, and products already in that state are left as they are (unchanged), the same as the bulk delete. Requires manage_products. Bulk: outside the screen it requires a dry run (which lists the products that change and flags unknown ids and the ones that would not change) and a confirm_token.

Needs confirmation: first dry_run: true (preview and confirm_token, valid 10 minutes and for one run), then the same body with confirm_token. In a few operations only with certain data: the description says when. Why and how: Dry run and confirm_token.

Scope
crm:write
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_bulk_archiveOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.bulk.archive".

Declared cost: up to 0 reads and 500 writes per call (they count against the daily quota).

Parameters

product_idsarray<string>bodyrequired

Up to 500 product ids (crm.products.list); ids that do not exist are skipped and counted in missing.

is_archivedbooleanbodyrequired

true archives them, false brings them back.

Response

updatednumber
missingnumber

Ids that are not products of the organization (skipped).

unchangednumber

Products already in that state.

Errors

Example

curl -X POST "https://api.mb-suite.com/v1/crm/products/bulk/archive" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "product_ids": [
    "PRODUCT_ID"
  ],
  "is_archived": true,
  "dry_run": true
}'

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X POST "https://api.mb-suite.com/v1/crm/products/bulk/archive" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "product_ids": [
    "PRODUCT_ID"
  ],
  "is_archived": true,
  "dry_run": true
}'
POST/v1/crm/products/bulk/delete

Delete many CRM products

crm.products.bulk.delete

IrreversibleBulk · up to 500Since 2026-11-01

Deletes up to 500 products; each one goes to the 30-day trash and can be restored individually with platform.trash.restore. Unknown ids are skipped: deleted counts what was deleted and missing what did not exist. Deal quotes keep their own copy of the lines. Requires manage_products. Outside the screen it requires a dry run and a confirm_token.

Needs confirmation: first dry_run: true (preview and confirm_token, valid 10 minutes and for one run), then the same body with confirm_token. In a few operations only with certain data: the description says when. Why and how: Dry run and confirm_token.

Scope
crm:write and “Allow deletions” (crm:delete in OAuth)
Permission
Edit in the module · CRM action: manage_products
MCP tool
crm_products_bulk_deleteOn the full surface; on the compact one, mb_execute_operation with id: "crm.products.bulk.delete".

Declared cost: up to 500 reads and 1000 writes per call (they count against the daily quota).

Parameters

product_idsarray<string>bodyrequired

Up to 500 product ids (crm.products.list); ids that do not exist are skipped and counted in missing.

Response

deletednumber
missingnumber

Ids that are not products of the organization (skipped).

trash_item_idsarray<string>

The trash items this deletion left, one per record: the item_id of platform.trash.restore (POST /trash/{item_id}/restore).

trash_expires_atnumber

When the copy leaves the trash for good (epoch ms): 30 days after the deletion.

Errors

Example

curl -X POST "https://api.mb-suite.com/v1/crm/products/bulk/delete" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "product_ids": [
    "PRODUCT_ID"
  ],
  "dry_run": true
}'

Try it with your test API key

With a test API key the request always goes to your practice organization: example data you can reset.

curl -X POST "https://api.mb-suite.com/v1/crm/products/bulk/delete" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "product_ids": [
    "PRODUCT_ID"
  ],
  "dry_run": true
}'