API and integrations
TimeTrack exposes a REST API, signed outbound webhooks, and Slack and Teams copilot commands. There is no native Zapier, Make, SAP, or Power BI connector.
Timesheets API
GET /api/v1/timesheets (read:timesheets) filters with from, to, and validated. Each page has at most 500 rows (limit, default 500). Follow nextCursor until it is null. Soft-deleted rows are omitted. Fields include description and clientName. POST upserts a row (write:timesheets) with userId or userEmail and projectId or projectName. PATCH updates hours, billable, or description on an unlocked row. There is no validate endpoint.
Other endpoints
GET /api/v1/projects (read:projects) returns at most 200 projects. POST and PATCH projects need write:projects. POST /api/v1/users (write:users) creates a consultant or manager. GET /api/v1/brief needs read:brief. POST /api/v1/inbound/timesheets (write:timesheets) upserts a row from an externalProjectId mapping. That inbound route is what a Zapier or Make HTTP step can call. TimeTrack does not publish a Zapier or Make app.
Webhooks
Events that are actually sent: timesheet.submitted, timesheet.validated, timesheet.rejected, month.closed, manager.brief, and webhook.test from Settings. The body is { event, timestamp, data }. The header X-TimeTrack-Signature is sha256= plus the HMAC-SHA256 of the raw body. project.created is not dispatched.
Files for Power BI
The team file is the validated billing export, not the personal dashboard export. See CSV exports, PDF and Excel, and SAP and Power BI.