PandaIDX

API Docs

Getting Started

The Panda IDX API provides programmatic access to MLS listings, contacts, visitor analytics, and market data. Use it to build integrations, automate workflows, or power your own applications.

Base URLs

Authentication

The Panda IDX API uses Bearer token authentication. There are two ways to get a token depending on your use case.

Personal API Key

For accessing your own data. Generate a key from your dashboard. Requires a Signature subscription.

Authorization: Bearer {{YOUR_API_KEY}}

OAuth 2.0 Token

For Partners

For apps that access other users' data. The user authorizes your app via OAuth, and you receive an access token.

Authorization: Bearer {{ACCESS_TOKEN}}

Personal API Key

If you want to access your own data programmatically (listings, contacts, analytics), generate a personal API key from your dashboard. Requires a Signature subscription.

1
Make sure you have a Signature subscription
2
Go to API Keys in your dashboard sidebar
3
Click Create Key and give it a name
4
Copy your key immediately — it won't be shown again

Use the key as Authorization: Bearer YOUR_API_KEY in all API requests.

OAuth for Partners

Building an app that accesses other users' data? Register as a partner and use OAuth 2.0 to request authorization from Panda IDX users.

1
Go to Partner Account Manage Apps in your dashboard
2
Click Create App and fill in your app details: name, description, logo, and callback URL
3
Select the scopes your app needs (e.g., listings, contacts, analytics)
4
Submit for review — the Panda IDX team will approve your app
5
Once approved, your client_id and client_secret are available in View Credentials from the app dropdown

Use these credentials to implement the OAuth 2.0 flow below.

Make your first request

Search for active listings in Miami with your OAuth access token:

Request
curl --request GET \
--url "https://api.pandaidx.com/v1/listings?city=Miami&type=sale&limit=5" \
--header "Authorization: Bearer YOUR_ACCESS_TOKEN" \
--header "Content-Type: application/json"

Explore all available endpoints in the sidebar, or start with Search Listings.

OAuth 2.0 Flow

All API endpoints require an OAuth access token. Create an OAuth App in your Partner Account Manage Apps to get your client_id and client_secret.

1
Redirect user to /authorize with your client_id and scopes
2
User logs in and authorizes your app on the consent screen
3
Panda IDX redirects to your callback URL with an authorization code
4
Exchange the code for an access_token
5
Use the access_token as Authorization: Bearer header in all API calls

Error Handling

All errors return a JSON object. API endpoints and OAuth endpoints use slightly different formats. Click each status code to see the response body.

400 Bad Request

The request is invalid — missing required fields, malformed data, or expired OAuth code.

API — Invalid parameters

{
"error": {
"code": "bad_request",
"message": "Missing required parameter: city or zip",
"status": 400
}
}

OAuth — Expired code

{
"error": "invalid_grant",
"error_description": "Invalid or expired authorization code"
}

Rate Limits

Standard

60 requests/min

Premium

300 requests/min

When rate limited, the API returns 429 Too Many Requests. Implement exponential backoff in your integration.

For Partners

Building an integration with Panda IDX? Register as a developer partner to get OAuth credentials and manage your apps.

2
Access the Manage Apps portal
3
Create an OAuth App with your redirect URIs and desired scopes
4
Wait for approval from the Panda IDX team
5
Receive your client_id and client_secret to start the OAuth flow

Next Steps