Approved guestbook entries. Visitor email and IP address are never returned.

All data endpoints also accept the common MaxRows (default 100, maximum 500) and StartRow paging parameters.

Records are returned in the items array of the standard response envelope.

Exchange your refresh token for an access token, then request data. The same two steps work in any language; JavaScript and Python are shown here.

const BASE = "https://www.YourDepartment.com/apps/api";
const REFRESH_TOKEN = "your-refresh-token-here";

// 1. Exchange the refresh token for an access token (do this from a server,
//    not from a public web page, so the refresh token stays secret)
const tokenRes = await fetch(`${BASE}/refresh/`, {
    method: "POST",
    headers: { "Authorization": `Bearer ${REFRESH_TOKEN}` }
});
const tokenData = await tokenRes.json();

// 2. Call the guestbook endpoint (reuse the token for up to 24 hours)
const res = await fetch(`${BASE}/guestbook/?MaxRows=10`, {
    headers: { "Authorization": `Bearer ${tokenData.access_token}` }
});
const data = await res.json();

data.items.forEach(item => console.log(item));

import requests

BASE = "https://www.YourDepartment.com/apps/api"
REFRESH_TOKEN = "your-refresh-token-here"

# 1. Exchange the refresh token for an access token
token = requests.post(f"{BASE}/refresh/",
    headers={"Authorization": f"Bearer {REFRESH_TOKEN}"}).json()

# 2. Call the guestbook endpoint (reuse the token for up to 24 hours)
data = requests.get(f"{BASE}/guestbook/",
    params={"MaxRows": 10},
    headers={"Authorization": f"Bearer {token['access_token']}"}).json()

for item in data["items"]:
    print(item)