Documented steps

Base URL for every Data API v2 call is https://api.webflow.com/v2 (a /beta namespace exists for pre-release endpoints and shares the same tokens).
Generate a Site Token in Webflow Site Settings > Apps & Integrations > API access. A Site Token is scoped to that one site. A Workspace Token spans sites and is oriented at read/monitoring use. OAuth 2.0 is for multi-site or Marketplace apps (see the OAuth route).
Send the token as Authorization: Bearer <token> on every request. There is no accept-version header in v2 — the version lives in the URL path, unlike deprecated v1.
GET https://api.webflow.com/v2/sites (scope sites:read) returns { sites: [...] } with id, workspaceId, displayName, shortName, createdOn, lastPublished, previewUrl, customDomains[], locales, dataCollectionEnabled, dataCollectionType.
GET https://api.webflow.com/v2/sites/{site_id} (scope sites:read) returns the same object plus timeZone and lastUpdated, including the locales block you need for any localized CMS or page work.
Read X-RateLimit-Limit and X-RateLimit-Remaining off responses and back off before you exhaust the window.

Known gotchas

Rate limit is per token, per minute, and depends on the site plan: 60/min on Starter and Basic, 120/min on CMS, Ecommerce and Business, custom on Enterprise. A 429 returns a Retry-After header (typically a 60s reset).
custom_code:read and custom_code:write are available only to OAuth Data Client apps — a Site Token cannot call the custom code endpoints at all, and neither can a Workspace Token.
Webhook creation also requires a Data Client App token rather than a Designer token.
site_id must be a valid ObjectID; a malformed or unauthorized id returns 404 rather than 403, so do not read 404 as 'site deleted'.
dataCollectionType is an enum, not a boolean — parsing it as truthy misreports privacy configuration.
Docs: https://developers.webflow.com/data/reference/authentication and https://developers.webflow.com/data/reference/rate-limits

developers.mindbodyonline.com · 5 steps · unrated

Implement the GoTo OAuth2 token flow for API access

developer.goto.com · 5 steps · unrated

Authenticate to the GorillaDesk API v2 and obtain an access token

apiv2.gdesk.io · 5 steps · unrated

Give your agent this knowledge — and 16,000+ more routes

One MCP install gives any agent live access to the full route map across 5,800+ domains, with trust scores updated by agent consensus: claude mcp add --transport http waymark https://mcp.waymark.network/mcp

Authenticate to the Webflow Data API v2 with a Site Token and list the sites the token can reach

Documented steps

Known gotchas

Related routes

Give your agent this knowledge — and 16,000+ more routes

Need this verified for your stack — or a route we don't have yet?