Developer Q&A

Hi everyone,I'm building an automation using n8n together with the Front API, and I'm running into a major challenge regarding attachment ordering inside a Front draft. I would really appreciate deeper clarification from the community or the Front team, because this is critical for my use case.ContextI'm a service provider and we onboard customers into different training programs. Each onboarding email contains multiple PDF attachments in a fixed order.From these files: 6 documents are always the same and are already included inside a Front Message Template 3 documents are unique per customer (contract, schedule, and one additional document), and these three files are generated dynamically in n8n and added to the draft in the same step after the template content is applied Because of this setup, I rely on a Front template for the 6 standard documents, and n8n is responsible for attaching the remaining 3 customer-specific PDFs.Problem: There is no way to create a draft from a template

I am attempting to build a sidebar plugin in Retool so I can utilise all of my existing modules, components, and queries so I can surface important contextual information for my CS team.We all use Google sign in to login to our Retool apps, and we are having a few problems inside Front’s sidebar due to third party cookies.The native Retool sign in screen does not/cannot pop up the Sign in with Google page so I get the below 403 error when I click “Sign in with Google”  I have now tried to create a public Retool app, that just has a single “Sign in with Google” button on it (which is just a Retool button), which calls the following script on click: console.log("Front.openUrlInPopup", Front.openUrlInPopup)Front.openUrlInPopup("https://{mydomain}.retool.com/googlelogin", {  width: 600,  height: 800,})When I load that into the sidebar, the console.log runs (I toggled on the dev tools in Front) and I can see the Front.openUrlInPopup method showing just fine, but nothing happens/the function

I am setting up an integration and using the teammate groups API.I can successfully create a teammate group and fetch it by id: POST /teammate_groups returns 201 with an id like cir_xxx GET /teammate_groups/cir_xxx returns the full group object  But when I call:GET https://api2.frontapp.com/teammate_groups Authorization: Bearer <token> Accept: application/json  I always get:{ "_links": { "self": "https://api2.frontapp.com/teammate_groups" }, "_results": [] }  Same behavior if I use the company host https://company.api.frontapp.com. The same admin token is used for create, get by id, and list, and other endpoints like GET /teams work fine. Am I missing something about how GET /teammate_groups works, or is this a bug with the listing endpoint? Any help would be appreciated.

I have a tool that POST a draft, with a body formatted in HTML like:“<p>Based on the information provided, we are pleased to offer you a quote of:</p><ul><li>Transport: EUR <strong>200</strong> (Excl. VAT)</li><li>Insurance (optional, on declared value) : EUR <strong>20</strong> (Excl. VAT)</li></ul>”When I visualize the draft created in Front (app or web browser), I see a blank line before the list:When I inspect the object, I see a <br></br> balise, which was not in the original HTML.This disappears when I’m viewing the draft as another person (viewer mode).And so when I send it, the blank line remains.. This is quite problematic as it gives something weird visually.

Hello Front Community,We have multiple conference rooms in our office, but currently, we don’t have any UI that shows whether a room is occupied or free.When creating a calendar invite in Front, we can add a meeting room. I’m planning to build a simple app that displays all meetings for a particular meeting room for the week.I was wondering if there is an API that allows me to retrieve the list of all meetings for a specific meeting room.Any guidance or examples would be greatly appreciated!

We Are trying to implement a Plugin using the Google Sign Button. The problem is however that the sign does not work because Google is trying to open a new window. That of course doesn't work in the plug-in within the Front app.  Hence, my question is if anyone else has built such an integration and how did they manage to integrate Google sign in within the Front app plugin?

Hey folks, I’m build a front plugin with Auth from Clerk, and running into a bunch of issues. The login screen successfully opens + launches a google oAuth login, but then fails due to clerk issues.I’m assuming it has something to do with all network requests causing a 401 when sent from the sidebar UI. Running locally/on prod we’re able to login successfully. Would love a running example in the docs for Clerk apps.

We have recently created some integrations with Front for our company. One of the things we would like to be able to do is see a report that gives us the number of API requests that we have made over a given time period with the option to break it down by API token. This would give us the ability to quickly track down changes in usage over a period of time if we were to start running into rate limiting.Is this something that exists?

Hi,after calling `updateDraft` from our composer plugin, the composer does not work properly any more. This happens even if I keep the current draft HTML without modifying it at all. Breakage we’ve seen:Cut/paste does not work any more Templates do not insert any more Templates insert at the wrong location Errors in JavaScript consoleWould you be able to look into it?BestRichard

Hi Front team,We’re building a sidebar plugin that loads our plugin page https://samplesite.com/front-plugin inside the Front UI. Front adds ?auth_secret=… to our iframe URL, and we’re trying to  bootstrap the SDK per the docs:  <script src="https://app.frontapp.com/scripts/sdk.js?auth_secret=…"></script>  Our page (HTTPS, same origin as the SDK allow‑list) loads one script at a time and retries the fallback URLs:  - https://app.frontapp.com/scripts/sdk.js  - https://app.frontapp.com/plugins/sdk.js  - https://app.frontapp.com/static/frontend-plugin-sdk.js  For each request we append the auth_secret from the iframe URL. We also guard against multiple insertions, remove existing script tags, and even tried adding  type="module".  What we’re seeing  In Firefox and in Chrome the script load always fails:  - The browser console shows:    Access to script at 'https://app.frontapp.com/scripts/sdk.js?auth_secret=…' from origin 'https://www.samplesite.com' has been blocked by CORS p

Hi,In playing around with app requests, I have noticed that it’s possible to map JSON output to dynamic fields, which can in turn update a custom field on the conversation using a rule. However, this seems to only work for a single property. My question is about updating multiple custom fields on the conversation. Is it possible to update multiple custom fields in response to a single application request, without triggering duplicate app requests for each dynamic field? Or is the best approach for this use case to have my backend update the custom fields directly via an API call?For example, I would like to ping my backend with a single request to get the user’s current subscription plan and their renewal date, and update two custom fields (plan and renewal date) on the conversation without triggering a separate application request for each field. The alternative is to ping my backend once with a custom request and have the backend itself update the custom fields by hitting Front’s API

Hello, We are a mortgage company using Front for our funding teams communication with loan officers, warehouse banks, title companies etc. Our primary tools we use are Airtable and make.com. My end goal is:When the initial contact point occurs, associate the conversation and the airtable record together by housing the convID in Airtable and the Airtable recordID as a custom object I assume?Have a sidebar plugin that users can open up and it show information about the Airtable record associated with the current conversation, Be able to make small updates to statuses etc in Airtable from inside the plugin. Is there any recommended ways to go about this? Whether it be instructions or just links to highly rated partners?Thank you! 

Hi Front Team,I am attempting to use the /events endpoint for incremental syncs, and I realized that it does not capture updates to the name or status of existing tickets. Similarly, these updates do not update the last activity timestamps used to order the response to /conversations/search.At the moment, the workaround is to re-pull all tickets in bulk, which is inefficient and can quickly run into rate limits.Are there other workarounds? If not, is there a plan to support these updates, either as new event types or as filters? Thank you!

When I add a comment myself I can mention a conversation (cnv_*) and it will get turned into a link and a little preview added below. When I do that via the API that doesnt happen. I can do the linkify myself as a markdown link but I’d love to be able to get the previews to show as well. Any way to do that?

Hi,I’m creating an integration with Front which will sync conversation and inbox data. API tokens will not work for my use case, so I need to use OAuth.Can I add Workspace scopes to an OAuth app? Workspace scopes are visible when creating API tokens but not OAuth.I am also trying to use OAuth with non-admin users. Is there any way to authenticate non-admin users with workspace member users using OAuth? Specifically, I need to use the Shared resources scope so that the integration can pull conversation, inboxes, etc. for a user.Thanks!

Hi all I’m wanting to pull back when a message originated from a message template via the API - looking at https://dev.frontapp.com/reference/get-message there doesn’t seem to be a field for this, however inside the dashboard under “analytics / Message templates” I can see that this information is available e.g “password reset” template was used 300 times.Is this same information available via the API?Thanks!

I’m trying to create a webhook within my internal app. Whenever I click the “Create” button on the “Create Webhook” page a toast pops up saying “Webhook veritification failed”. I have verified from the logs (and from trying it in curl myself) that the URL is responding with a 200 status, application/json type and “{ "type": "success" }” as the content. What else do I need to do to get Front to accept my webhook url?  

I’m currently trying to understand whether there’s a way to determine which user granted the OAuth token I’m using in the request?I’ve found the `API Token Details`, but that appears to only expose company-level information.Could I achieve this by introspecting the JWT claims? (e.g. `sub`?) 

Dear community,I need your help and would greatly appreciate any support.My task:Fetch exactly the same conversations shown to my users and team inboxes in the “Open” and “Later”/“Snoozed” views. I have not been able to accomplish this.Could someone provide a sample code or give instructions how to exactly filter conversations to achieve the goal? (I am Admin).Thank you,Best regards,Denis

I’m currently having trouble where I’m not able to trigger a sidebar opening when clicking “Call with” from a contact preview. It works without issue from the Contact Sidebar, but not the preview card. I’ve recorded this demo walking through what I’m experiencing.    

I am using the POST `/conversations/cnv_123/messages` endpoint to add a reply message to a conversation that already exists. When I fetch the messages, I see that they contain a `metadata` field that is just {}.  Is there a way to set custom metadata fields for later use in the endpoint? When I try just adding a `metadata` field to my payload, the operation passes but the metadata does not persist when re-fetched.

Hello - at the moment when attempting to use an inbuilt copy paste button in my sidebar plugin i get the following error.Unhandled Runtime ErrorNotAllowedError: Failed to execute 'writeText' on 'Clipboard': The Clipboard API has been blocked because of a permissions policy applied to the current document. See https://goo.gl/EuHzyv for more details.After investigating the front sidebar plugin iFrame it looks as if clipboard-write is not allowed. Are there either, plans to change this or a suggested workaround? If no plans to change at the moment i can submit as a suggestion. Thank you for your help. 

I ran into internal error 500 when trying to use attachments. Even If I don’t use attachments and just Content-type multipart/form-data it returns error anyway.postmanpostmanwith code (wordpress)[headers] => WpOrg\Requests\Utility\CaseInsensitiveDictionary Object        (            [data:protected] => Array                (                    [date] => Sun, 03 Aug 2025 06:23:15 GMT                    [content-type] => application/json; charset=utf-8                    [content-length] => 52                    [x-ratelimit-limit] => 100                    [x-ratelimit-remaining] => 98                    [x-ratelimit-reset] => 1754202213.637                    [vary] => Accept                    [etag] => W/"34-zWc8gW+EWeg2mrqPaNjNywdzhTk"                    [x-front-time] => 33                )        )    [body] => {"_error":{"message":"An internal error occurred."}}

Hi everyone, Has anyone here built a custom integration between Front and a cloud contact center solution?We’re looking to:Display incoming voice call context in Front Sync call metadata (duration, caller ID, agent notes)

 I have an image in signature. When sending from admin image is shown correctly and has attribute data-image-whitelisted. But when using API it is brokenfrom API$url = 'https://api2.frontapp.com/channels/' . $channel_id . '/messages'; $body = array( 'to' => array( $to ), 'subject' => $subject, 'body' => $content, 'text' => wp_strip_all_tags( $content ), 'options' => array( 'archive' => false, ), 'author_id' => 'tea_j7twg', 'signature_id' => $signature_id, ); $args = array( 'method' => 'POST', 'headers' => array( 'Authorization' => 'Bearer ' . $api_token, 'Content-Type' => 'application/json', // 'Content-type' => 'multipart/form-data', ), 'body' => wp_json_encode( $body ), 'timeout' => 30, ); from adminI know also that if omit author_id, email always in spam.