API & enterprise integration

Ask one question:
“Did they finish today?”

A simple, tenant-scoped REST API lets your WMS, HRIS, kiosk, or BI tools check a worker's lesson status, launch the lesson, and pull completion data — so safety training fits into the systems your operation already runs. 

# Check today's status for one worker
GET /api/v1/employees/emp-10423/today
Authorization: Bearer tbm_live_••••

# → 200 OK
{
  "externalId": "emp-10423",
  "lessonDate": "2026-06-22",
  "status": "not_started",
  "topic": "Powered Equipment",
  "subTopic": "Forklift Pedestrian Safety",
  "lesson": {
    "title": "Forklift Pedestrian Safety",
    "videoDurationSeconds": 78
  },
  "launchUrl": "https://toolboxminute.com/viewer/start?token=…"
}
The Toolbox Minute difference

We return the truth. You hold the controls.

Other tools try to be the gate. We don't. Toolbox Minute runs the lesson and tells you, honestly, whether a worker has finished today's minute. Your systems decide what that means — block a task, nudge a supervisor, or simply keep the record. You own the policy, including how you handle our occasional downtime.

That separation is the point: clean data in, your rules on top.

Four possible answers
completedfinished today's lesson
in_progressstarted, not done
not_startedhasn't begun
no_lesson_schedulednothing due
Developer documentation

Everything a developer needs to wire it up

The full endpoint reference, request and response shapes, authentication, and signed webhooks live in the developer docs — with a public sandbox you can call right now, no account required.

Read the developer docs Explore the sandbox
QuickstartFirst call in five minutes.
AuthenticationKeys, headers, and rotation.
API referenceEvery endpoint and payload.
WebhooksSigned events, no polling.
The signed handoff

How a worker gets into the lesson

Workers arrive anonymously through a single-use launch token — no Toolbox Minute account, no extra password. Your system stays the front door.

1

You ask

Call /today with your returnUrl. If the worker hasn't finished, you get a launchUrl carrying an opaque token.

2

You redirect

Send the worker to that launchUrl from your WMS, kiosk, or email — one tap, straight into today's minute.

3

We verify

The token is hashed, single-use, and time-limited (≈30 min, configurable). It resolves the right org and worker, then plays the lesson.

4

They return

On completion we send the worker back to your allowlisted returnUrl — and your next status check reads completed.

Authentication

Send your key on every request, either way:

Authorization: Bearer tbm_live_••••
# — or —
X-Api-Key: tbm_live_••••

Keys are created in the admin console, scoped to your organization, shown once, and stored only as a hash. Revoke any key instantly.

Safe by design

  • Every call is isolated to your tenant's data
  • Return URLs are exact-match allowlisted — no open redirects
  • Launch tokens are single-use and time-limited
  • API access is an entitlement; requests are gated to it
Where teams plug it in

Integration patterns

WMS / time clock

Check status at clock-in and decide whether to prompt the lesson before a task.

HRIS / training records

Sync completions and scores into the employee's official training file.

Kiosk / mobile app

Show the week's progress and launch any available day with a generated token.

BI / compliance dashboards

Poll the compliance roll-up and activity feed to power your own reporting.

Wire safety into your stack.

Add the status API to any plan, or switch it on free during your trial.

Start free trial Read the API docs Talk to sales