Show our lead screens inside your own app

const API = 'https://rest-dash.happierleads.com';
const key = `privateKey=${process.env.HL_MASTER_KEY}`;
const call = async (method, path, body) => {
  const r = await fetch(`${API}${path}?${key}`, { method, headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) });
  if (!r.ok) throw new Error(`${method} ${path} → ${r.status} ${await r.text()}`);
  return r.json();
};

const companies = await db.companies.find({ happierleadsWebsiteId: null }); // your own query
for (const c of companies) {
  try {
    const { websiteId } = await call('POST', '/admin/websites', { name: c.name, domain: c.domain || '' });
    await db.companies.update(c.id, { happierleadsWebsiteId: websiteId }); // save first, then limits
    await call('PUT', `/admin/websites/set-limits/${websiteId}`, { credits: c.plan.leads, emailAccounts: 2 });
    await call('PUT', `/admin/websites/toggle-limits/${websiteId}`, c.isPaying
      ? { trialEnabled: false, activeWebsite: true, enableWebsiteLimits: true, refreshOnDate: c.renewsAt }
      : { trialEnabled: true, trialExpireDate: c.trialEndsAt, enableWebsiteLimits: true });
    console.log('ok', c.id, websiteId);
  } catch (e) { console.error('FAILED', c.id, e.message); } // run again to retry
  await new Promise((r) => setTimeout(r, 300)); // gentle on the API
}

curl -X POST "https://rest-dash.happierleads.com/admin/websites?privateKey=$HL_MASTER_KEY" \
  -H "Content-Type: application/json" -d '{ "name": "Acme Ltd", "domain": "acme.com" }'
# 201 { "websiteId": "6acf…b384" }   ← save it on the company

curl -X PUT "https://rest-dash.happierleads.com/admin/websites/set-limits/$WEBSITE_ID?privateKey=$HL_MASTER_KEY" \
  -H "Content-Type: application/json" -d '{ "credits": 500, "emailAccounts": 2 }'
curl -X PUT "https://rest-dash.happierleads.com/admin/websites/toggle-limits/$WEBSITE_ID?privateKey=$HL_MASTER_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "trialEnabled": true, "trialExpireDate": "2026-11-01T23:59:59.000Z", "enableWebsiteLimits": true }'

app.get('/api/leads-embed', requireLogin, async (req, res) => {
  const admin = req.user.isStaff; // your rule: who may see every website
  const r = await fetch('https://rest-dash.happierleads.com/v3/embed/sessions', {
    method: 'POST',
    headers: { Authorization: `Bearer ${process.env.HL_EMBED_KEY}`, 'Content-Type': 'application/json' },
    body: JSON.stringify(admin
      ? { scope: 'account' }
      : { websiteId: req.user.company.happierleadsWebsiteId, view: req.query.view || 'auto' }),
  });
  if (!r.ok) return res.status(502).json({ error: 'Could not open the leads screen' });
  res.set('Cache-Control', 'no-store').json({ url: (await r.json()).url }); // works once, 60 seconds
});

<iframe id="hl" title="Leads" style="width:100%;height:100%;border:0"></iframe>
<script>
  fetch('/api/leads-embed?view=auto')
    .then((r) => r.json())
    .then(({ url }) => { document.getElementById('hl').src = url; });
</script>