The API Report CardAPI Index
Blackbaud

Blackbaud API

Nonprofit Management · blackbaud.com

SKY API is a real REST and OAuth 2.0 program at developer.blackbaud.com with a free 1,000 call/day sandbox. Production access for third parties requires ISV Partner approval and per-connection fees, plus each customer org's admin granting scopes. Legacy RE7 and FE7 have no API surface.

Last verified: October 2026Nonprofit & CommunityMCP PARTIAL
API GRADE
D
VERIFIED OCT 2026

SCORECARD

ExistenceGOODSKY API is a public REST plus OAuth2 program at developer.blackbaud.com with a free sandbox tier; gating applies to production access.
AccessPOORThe free sandbox stops at 1,000 calls/day; production needs ISV Partner approval, per-connection fees, and each org's admin granting scopes.
CoveragePOORUneven across the portfolio: RENXT and FENXT are covered, YourCause, Luminate, and JustGiving lag, legacy RE7/FE7 have nothing.
AuthPOOROAuth 2.0, but refresh tokens expire after 60 days of inactivity, breaking long-tail integrations.
Docs & DXGOODdeveloper.blackbaud.com offers full references and a free sandbox, though there is no officially maintained SDK.
StabilityMIXED
MCPPARTIALBlackbaud does not publish an official MCP server, but third-party servers exist on GitHub, including a read-only CData server for Financial Edge NXT and a community server for Raiser's Edge NXT. Coverage is read-heavy and adoption is minimal. VERIFIED 2026-08
Supergood turns hard-to-integrate enterprise software into clean REST APIs and MCP tools: stable endpoints, normalized JSON, managed auth.

Frequently asked questions

Blackbaud scores D on Supergood's API Report Card. SKY API is a real REST and OAuth 2.0 program at developer.blackbaud.com with a free 1,000 call/day sandbox. Production access for third parties requires ISV Partner approval and per-connection fees, plus each customer org's admin granting scopes. Legacy RE7 and FE7 have no API surface.

Tried to integrate with Blackbaud?
SOURCES
Production API access for third-party developers is gated behind ISV Partner Program approval and a published per-connection fee schedule developer.blackbaud.com ↗
429 rate-limit / 403 quota-limit responses are common; free developer tier capped at 1,000 calls/day shared environment developer.blackbaud.com ↗
Customer-side enablement of an approved SKY API app requires the org's Blackbaud admin to manually grant subscription and scopes, slow to roll out across portfolios community.blackbaud.com ↗
Legacy on-prem Raiser's Edge 7 and Financial Edge 7 customers have no SKY API surface, they must first migrate to NXT, which is a multi-quarter project blog.blackbaud.com ↗
API coverage is uneven across the product portfolio, RENXT and FENXT are well covered, but YourCause, Luminate, and JustGiving APIs lag or require separate integrations developer.blackbaud.com ↗
OAuth tokens are short-lived (60 min) with refresh tokens that expire after 60 days of inactivity, breaking long-tail integrations developer.blackbaud.com ↗
Webhooks exist but are subscription-gated and limited in event coverage vs. polling REST endpoints developer.blackbaud.com ↗
Sandbox uses synthetic data, partners cannot test against a copy of a real customer's database, leading to surprises at production cutover developer.blackbaud.com ↗
2020 ransomware breach impacted ~13,000 customer organizations and millions of downstream donors / patients / students; Blackbaud paid the attackers and was slow / minimizing in disclosure ftc.gov ↗
$49.5M multi-state AG settlement plus separate $6.75M California AG settlement (HIPAA + state privacy violations) tied to the same breach hunton.com ↗
FTC final order (2024) requires deletion of unnecessary data, prohibits misrepresentation of security and retention practices ftc.gov ↗
Universal $600/year PCI compliance surcharge added to every customer regardless of transaction volume bonterratech.com ↗
Core fundraising features (events management, tribute gifts, advanced reporting) sold as paid add-ons rather than included bonterratech.com ↗
Annual price increases routinely outpace feature additions; small orgs report being "charged for things we don't use" itqlick.com ↗
Pricing is opaque, typical ACV runs $20K-$50K for mid-size orgs, $75K-$150K+ for larger, with no public list vendr.com ↗
Long-term lock-in: data migration off Raiser's Edge NXT is notoriously painful and often requires third-party consultants stratuslive.com ↗
NXT cloud migration from on-prem Raiser's Edge 7 / Financial Edge 7 has been a multi-year, friction-heavy program for many customers blog.charityengine.net ↗
Bundle and contract complexity, separate SKUs for Merchant Services, Online Express, Luminate, Workplace Giving, Grantmaking, Tuition Mgmt g2.com ↗