Read and change projects and tasks from your own code, hear about changes as they happen, pull the plan into your reports, and let AI agents work in it. Five ways in, each with a token that acts as the person who made it.
Each one works today. Start with the sample, then follow its guide.
Create a token under Settings, then Developer, with only the scopes and projects it needs and an expiry. It acts as you, in one organization, and can never do more than you can. The OpenAPI 3.1 spec describes every route.
Every plan, including Free
curl https://api.onplana.com/api/tasks/mine \
-H "Authorization: Bearer pat_YOUR_TOKEN"Onplana POSTs a JSON payload to your URL when one of 22 event types happens. Each delivery carries an HMAC-SHA256 signature of the body, made with your secret, and every attempt is kept in the delivery history.
Business and up
curl -X POST https://api.onplana.com/api/webhooks \
-H "Authorization: Bearer pat_YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"name":"Status changes","url":"https://example.com/onplana","events":["task.status_changed"],"secret":"YOUR_SECRET"}'A read-only OData v4 feed of projects, tasks, assignments, resources, timesheet lines, custom field values and baselines. Power BI, Excel or your warehouse signs in with a token that has the reporting scope.
Professional and up
curl -u "token:pat_YOUR_TOKEN" \
"https://api.onplana.com/api/odata/Tasks?$top=5"Claude, ChatGPT, Cursor and any other MCP client can read and manage work with the permissions of the person who connects them. Clients sign in through the browser, so there is no app to register first.
Every plan, including Free. The number of agents connected at once grows with the plan.
{
"mcpServers": {
"onplana": { "url": "https://mcp.onplana.com/mcp" }
}
}Before you build, check whether the connection exists. Each connector signs in with a personal access token and runs the same check first.
Connector triggers subscribe a webhook: Business and up.
curl https://api.onplana.com/api/organizations/current \
-H "Authorization: Bearer pat_YOUR_TOKEN"Read from the pricing table, so this list and the pricing page always agree.
| What you use | Plan |
|---|---|
| REST API and personal access tokens | Every plan, including Free |
| Webhooks | Business and up |
| OData reporting feed | Professional and up |
| MCP server | Every plan, including Free |
| Microsoft Teams app and Copilot agent | Every plan, including Free |
| SharePoint and OneDrive file links | Professional and up |
| Connector triggers (they subscribe a webhook) | Business and up |
No. The API is plain JSON over HTTPS with an OpenAPI 3.1 spec, so any HTTP client works, and you can generate a typed client from the spec.
No. The REST API and tokens are on every plan, including Free. Webhooks are on the Business plan and up and the OData feed on the Professional plan and up.
Not yet through OAuth. Today each customer creates a token for your integration, and the token acts as the person who made it. If your product needs more, tell us what it is.
The API terms page in the developer docs covers acceptable use, what a token stands for, and how breaking changes are announced.
Sign up free, open Settings, then Developer, and make a token with the scopes your code needs.