Developers

Front has just released an official Front Chat iOS SDK that makes it easier than ever to install Front Chat in your native iOS apps. Visit our Developer Portal to learn how to install and use the SDK. The setup guide includes a link to the SDK’s GitHub repo. P.S. An Android version of the SDK is coming soon...

We just released sample code that demonstrates how to create a Front sidebar plugin using Vite, React, and Auth0!  Visit our Developer Portal to learn more.

I’m trying to use ‘strict-dynamic’ for my ‘script-src’ content security policy.I have a nonce set up in my page where I include the Front chat widget script: <script nonce="random nonce here" type="text/javascript" src='https://chat-assets.frontapp.com/v1/chat.bundle.js'></script>but it appears that that chat.bundle.js script dynamically loads app.bundle.js, which leads to a CSP violation in Chrome:Refused to load the script 'https://chat-assets.frontapp.com/v1/app.bundle.js?v=840fb872' because it violates the following Content Security Policy directive: "script-src 'self' 'strict-dynamic' chat-assets.frontapp.com 'nonce-9a6157311c94f2a96914fe5ac561d6fc'". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.Is there a way to use strict-dynamic with the Front chat widget?

We are thrilled to announce that partners and developers can now use OAuth to access all available Front permission scopes, such as personal resources and knowledge base data in addition to shared workspace data. This update means that integrations can use OAuth regardless of the type of data they need access to. OAuth makes it much easier for customers to install your integration by simply agreeing to the OAuth screen instead of requesting that the customer manually generate and supply your integration an API token. Previously, OAuth tokens could only access shared workspace data.  Visit our Developer Portal to view the full list of available scopes. You can manage scopes when you add OAuth credentials for your developer app. With this change, Front admins will also have access to a Tokens tab on the App Store that lists the resources your app has been granted. Learn more on our Help Center. 

How do I lookup a front email using exchange or office365 message-id?

Is it possible to get a conversation’s updated_at datetime from the Plugin SDK?

Hey, We had previously added a few links to contacts in our Front instance. However, we wish to remove them now. The API explains how that can be done with lists, but doesn’t really go into contact links. How can we achieve this?

If we setup OAuth with a agent, but later, the agent resigned and her account deactivated, will this affect the OAuth?

Is it possible to get Ticket data from the context (singleConversation) via the plugin SDK?

Our new contact list endpoints are replacing the contact group endpoints, which will be deprecated on September 1st, 2025. Please update your API calls before September 1st so that the URLs use contact_lists in the path instead of contact_groups. Note that the contact list ID remains the same as the contact group ID. The following table details how to change your endpoints:Deprecated path New path Notes https://api2.frontapp.com/contact_groups https://api2.frontapp.com/contact_lists   https://api2.frontapp.com/contact_groups/{contact_group_id} https://api2.frontapp.com/contact_lists/{contact_list_id} The contact_list_id is the same as the contact_group_id https://api2.frontapp.com/contact_groups/{contact_group_id}/contacts https://api2.frontapp.com/contact_lists/{contact_list_id}/contacts The contact_list_id is the same as the contact_group_id https://api2.frontapp.com/teammates/{teammate_id}/contact_groups https://api2.frontapp.com/teammates/{teammate_id}/contact

We are looking for a report, that will provide the below information to export so that we can merge with our inbound phone traffic. DateHourInboxDirection

You can now manage ticket statuses through the Core API. Front released ticketing a couple months ago, which you can now access via the API if your company has the ticketing feature enabled. The following is a summary of the new ticketing functionality available in the Core API:Conversation responses return status_id, status_category, and ticket_ids fields. Search for conversations in the open, waiting, or resolved ticketing statuses via the is operator. Use ticketing filters in the q query string parameter when listing conversations. Access new Statuses API routes:  List company ticket statuses Get ticket status Update the status_id of a conversation. Update conversation reminders with a waiting status_id.

Is there a way to preview a message attachment from the Sidebar plugin, for example using the plugin SDK downloadAttachment()?I am currently only getting a File object returned from Front.downloadAttachment('msg_xxx', 'fil_xxx') with the following properties:lastModified:  1740416909060lastModifiedDate:  Mon Feb 24 2025 18:08:29 GMT+0100 (Central European Standard Time) {}name: "fd880b5930634b94bfa961a2b3815db2.jpg"size:  293622type:  "image/jpeg"webkitRelativePath: ""

A few questions regarding teammates:What would be a scenario where multiple teammates are returned by listTeammates()? Is the current front user always the first user in the array? Is there a better way of identifying the current front user from the plugin, ie. where only the current user is returned?

Hello!I wonder why “Get message seen status” https://dev.frontapp.com/reference/get-message-seen-status API works only for outbound messages? Wasn't the initial idea to have a info WHEN a teammate has seen INBOUND message?{    "status": 400,    "title": "Bad request",    "message": "You cannot see seen status for an inbound message."}Why am I asking this? We’re implementing the Frontapp plugin which gonna track the time when a teammate seen a inbound message from a customer (to measure activity of diff(seen,archived)). There’re not those fields in the webhook triggers, so we can’t receive the time of “seen” activities. The plugin context API doesn’t have this data too.Also I see the internal CONVERSATION by ID request that returns the “seen” data for it. I think it can be useful for our task, but this data is not in the conversation PUBLIC API. Could you cover 2 questions please:1. How to get “seen” information per teammate for a MESSAGE?2. If for some reason (1) is not possible, how c

We have been integrating Front Chat into our app, and the experience has been great so far. However, we are facing a challenge with supporting multiple logins on the same machine.Expected Behavior:• When a user logs in, they should see the continuation of their own previous chat (if available).• If a different user logs in, they should only see their own chat history (or start a new conversation if no prior chat exists).Current Issue:Right now, when a new user logs in on the same machine, they see the chat history of the first logged-in user, which we want to avoid.We attempted using the shutdown() method from the Front Chat SDK to clear the chat on logout, but this also removes the previous chat history, preventing the original user from retrieving their past conversations when they log back in.can someone help me out on this matter? 

Hey all,I am trying to build a connection to Front to interact with the conversations, so we can assign the assignees to the conversations through the API. Using the example of the API documentation keeps giving me errors and I can’t figure out what is going wrong. I’m using the Update conversation assignee with the NodeJS example, but I keep getting an error:{"_error":{"status":400,"title":"Bad request","message":"Body did not satisfy requirements","details":["body.assignee_id: missing"]}}I’ve tried it with JSON and FormData, but the error stays the same, my latest example code is the following const frontUpdateAssignee = async ({ conversation, assignee, token }) => {   const options = {    method: "PUT",    headers: {      accept: "multipart/form-data",      authorization: `Bearer ${token}`,    },    body: JSON.stringify({ assignee_id: "tea_hjdlj" }),  };  const updateAssignee = await fetch(    `https://api2.frontapp.com/conversations/${conversation}/assignee`,    options  )    .t

If your team has SLA agreements you can’t afford to miss, or you already page on-call teammates for urgent issues, you might want to consider automating this using Front Rules and Application Requests.This post will guide you through how to add a Front Application Request to trigger a PagerDuty incident, and how to enable that from a Rule in Front. 1. Create a PagerDuty ServiceThe PagerDuty Service is required as the “entry point” for creating the incident. When creating the PagerDuty Service, select the Events API V2 integration;Creating a PagerDuty Service2. Create your Front Application RequestHead into Front > Settings > Developers, and create a new App. Give it a useful name like “PagerDuty”. Click into the Servers tab in your new App, and create a server. The PagerDuty events API is hosted at https://events.pagerduty.com, so we can add that as the Server Origin value. No auth is needed here - this is specified elsewhere.Click Save. 3.  Add Application RequestClick into the

Using fetchPath() I can retrieve the current conversation URL, but the function returns a Promise Object.How do I get the “PromiseResult” value from the object, ie. how do I get the path into a string?Front.contextUpdates.subscribe(context => { let path = context.fetchPath();}); 

Does anyone have any insight or tips to share regarding using the Front API in PowerApps via PowerAutomate?  I've been considering exploring this possibility. 

We are happy to announce that you can now access knowledge base API endpoints through the Core API. These endpoints allow you to read and update your internal and external Front knowledge bases. With the API, you now have the flexibility to process your knowledge base content for various purposes, including advanced display on different websites and additional means of importing content. Read the docs on our Developer Portal to start using the knowledge base API endpoints.

We are thrilled to announce a new enhancement to our Core API knowledge base resources: Endpoints now return a slug for article and category pages! The slug is a user-friendly, readable string that can be used to construct URLs to your knowledge base articles and categories. This addition makes it easier than ever to integrate and surface your knowledge base content within the search results or display components of systems external to Front's knowledge base, such as a community hub or other resource center. The following endpoints return the URL slug in their response:List articles in a knowledge base Get a knowledge base article List categories in a knowledge base Get a knowledge base category To construct the full URL, use the following pattern:<protocol>://<domain>/<locale>/<slug> For example, if an article slug returns as /articles/57 ...the full article URL in the EN locale would be:https://yourDomain.com/en/articles/57 Happy coding! 

Hi,We are currently integrating the chat SDK into our apps, and while reviewing the documentation, we came across the Identify Users page.We have a few questions regarding the use of userId for identification, as we do not have user phone numbers in all cases and were hoping to use userId instead of email.Specifically, we would like clarification on the following: What is the userId? Is it an ID that we define within our system, or is it the contact ID generated by Front? Behavior when using a custom userId: If the userId is defined by us, will Front create a new contact when it encounters the userId for the first time, regardless of the email or phone provided in the contact object? If so, how can we prevent the creation of duplicate contacts? We already have a large number of contacts in Front and want to avoid duplication. Behavior when userId is defined by Front: If the userId is generated by Front, will it simply add the email and phone provided in the contact object to the e

 I have integrated the Chat Widget code in my iOS app. It was working very good.But today I noticed suddenly getting error in RED “Not delivered - connection issues” I have noticed the first message is delivered successfully but after that always getting the mentioned error.When I tried to run the code in my browser it shows AxiosError. What could be the reason?Here is my latest code<html> <body> <script src="https://chat.frontapp.com/v1/chat.bundle.js"></script> <script> function initChat(name, userId, userHash) { window.FrontChat('init', { chatId: 'ce4c58cd0f7cbcd3ed3eaf3b0b0XXXX', useDefaultLauncher: true, shouldShowWindowOnLaunch: false, shouldMobileReloadOnClose: true, name: name, userHash: userHash, userId: userId, onInitCompleted: () => {

Hello, I’m looking to build a plugin for Front. The concern I have is about security. The recommended pattern to use token verification is embed the “secret” in the search param rather than a header.Is there a way to embed the token in the header of the request instead so that it’s not obvious from the url?https://dev.frontapp.com/docs/security#token-verification