← Back to all docs
procore

Procore API

Procore is construction management software used by owners, general contractors, and specialty contractors to run projects end-to-end. An unofficial API lets you programmatically pull project lists, RFIs, submittals, change orders, budgets and commitments, invoices (pay applications),

By Alex KlarfeldJanuary 23, 2026
Procore API

What is Procore?

Procore is a cloud platform for construction management that centralizes project execution, financials, and field operations across stakeholders. Teams use Procore to coordinate drawings and documents, track RFIs and submittals, manage budgets and commitments, process pay applications, record daily logs, and maintain quality and safety artifacts.

Core product areas include:

  • Project Management (e.g., RFIs, Submittals, Drawings, Specifications, Meetings)
  • Financials (e.g., Budgets, Commitments/Subcontracts & POs, Change Orders, Invoices/Pay Apps)
  • Field Operations (e.g., Daily Logs, Timesheets, Inspections, Observations, Punch Lists)
  • Documents & BIM (e.g., file storage, versioned drawings/models, markups)

Common data entities:

  • Companies, Users, and Permissions
  • Projects (metadata, addresses, dates, status)
  • RFIs, Submittals, and their workflows
  • Budgets, Cost Codes, Commitments (subcontracts, purchase orders), Change Orders
  • Invoices/Pay Applications, Line Items, Retainage
  • Daily Logs, Photos, Attachments, Schedules, Observations

The Procore Integration Challenge

Construction teams rely on Procore daily, but turning portal-based workflows into API-driven automation is non-trivial:

  • Module-specific interfaces: RFIs, Submittals, Financials, and Field tools each have distinct UX and entitlement models
  • Enterprise security: SSO, MFA, and tight role-based controls complicate headless automation
  • Portal-first features: Many capabilities are optimized for the web app, and data is spread across multiple views and exports
  • Financial rigor: Permissions, approval chains, retainage, and auditability must be respected programmatically

How Supergood Creates Procore APIs

Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your Procore tenant.

  • Handles username/password, SSO/OAuth, and MFA (SMS, email, TOTP) securely
  • Maintains session continuity with automated refresh and change detection
  • Normalizes responses so you can integrate once and rely on consistent objects across modules
  • Aligns with customer entitlements and role-based permissions to ensure compliant access

Getting Started

  • Schedule Integration Assessment

Book a 30-minute session to confirm your modules, licensing, and authentication model.

  • Supergood Builds and Validates Your API

We deliver a hardened Procore adapter tailored to your workflows and entitlements.

  • Deploy with Monitoring

Go live with continuous monitoring and automatic adjustments as Procore evolves.

API Endpoints

Authentication

POST/sessions

Establish a session using credentials. Supergood manages MFA (SMS, email, TOTP) and SSO/OAuth when enabled. Returns a short-lived auth token maintained by the platform.

Authentication

POST/sessions/refresh

Refresh an existing token to keep sessions uninterrupted.

Projects

GET/projects

List projects with filters and summary details.

RFIs

POST/projects/{projectId}/rfis

Create a new RFI with workflow metadata and optional attachments.

Submittals

POST/projects/{projectId}/submittals

Create a submittal packet, assign reviewers, and set due dates.

Invoices (Pay Applications)

POST/commitments/{commitmentId}/invoices

Create an invoice/pay application against a commitment (subcontract/PO) with line items and retainage.

Use Cases

Project Data Sync

- Mirror projects, companies, and users into your internal systems - Keep project metadata current for analytics and reporting - Normalize addresses, statuses, and dates for multi-tenant operations

RFI and Submittal Automation

- Create RFIs from defect detections or field observations automatically - Initiate submittals with reviewers, due dates, and attachments - Track ball-in-court and status to drive SLA alerts

Financials: Budgets, Commitments, and Pay Apps

- Push commitments (subcontracts/POs) from your procurement system - Generate invoices/pay applications with line items and retainage - Pull financial statuses to reconcile with ERP (e.g., NetSuite, QuickBooks)

Field Reporting and Quality/Safety

- Ingest daily logs for workforce, equipment, and notes - Attach photos, observations, and punch list items to unify QA/QC workflows - Trigger follow-ups and approvals when thresholds are met

Technical Specifications

Authentication

Username/password with MFA (SMS, email, TOTP) and SSO/OAuth where enabled; supports service accounts or customer-managed credentials

Response format

JSON with consistent resource schemas and pagination across modules

Rate limits

Tuned for enterprise throughput while honoring customer entitlements and usage controls

Session management

Automatic reauth and cookie/session rotation with health checks

Data freshness

Near real-time retrieval of projects, RFIs, submittals, and financial objects

Security

Encrypted transport, scoped tokens, and audit logging; respects Procore role-based permissions

Webhooks

Optional asynchronous delivery for long-running workflows (e.g., invoice approvals, submittal reviews)

Latency

Sub-second responses for list/detail queries under normal load

Throughput

Designed for high-volume project data sync and pay app processing

Reliability

Retry logic, backoff, and idempotency keys minimize duplicate actions

Adaptation

Continuous monitoring for UI/API changes with rapid adapter updates

Frequently asked questions

Supergood supports workflows across commonly used modules such as Project Management (RFIs, Submittals, Drawings), Financials (Budgets, Commitments, Change Orders, Invoices/Pay Apps), and Field Operations (Daily Logs, Observations), subject to your licensing and entitlements. We scope coverage during integration assessment.

We support username/password + MFA (SMS, email, TOTP) and can operate behind SSO/OAuth when enabled. Sessions are refreshed automatically with secure challenge handling.

Yes. We can normalize commitments and pay apps to match your ERP schema (e.g., cost codes, retainage, line items) and deliver updates via webhooks or polling while complying with rate and permission constraints.

Yes. We support downloading artifacts and uploading attachments via signed uploads, with checksum validation and time-limited URLs.

Ready to get a real API?