Trustpilot API: what it can do, how to get access, and its limits

What is the Trustpilot API?

The Trustpilot API is not one API. It is a set of them, listed on Trustpilot's developer site. They cover business units, service reviews, product reviews, invitations, consumers, categories, resources and deletions. A separate product, Data Solutions, gives access to Trustpilot's wider database of business profiles and reviews.

Each API does a narrow job. Most businesses only touch three of them: the one that reads reviews, the one that sends invitations, and the one that posts replies.

Which Trustpilot APIs exist?

Here is the short version, taken from the developer docs.

The Business Units API has a find endpoint, GET /v1/business-units/find. It returns public information for a business based on its domain name. That is usually the first call, because most other calls need your business unit ID.

The Service Reviews API is where review data lives. Public calls such as GET /v1/reviews/{reviewId} return a review's public details. Private calls, under /v1/private/reviews/, add fields only the business can see.

The Product Reviews API does the same for product reviews. Its private version includes details such as the consumer's email and your reference ID.

The Invitations API sends review invitations. It has endpoints to trigger email invitations, create a unique invitation link and list your templates. There is also a call to remove stored invitation data for given email addresses.

What do you need to use the Trustpilot API?

Three things: an account, the right module and a key.

Trustpilot's getting started page says you need a Trustpilot for Business account with access to the API module. Not every plan can get that module.

Trustpilot's help article on its APIs says: "This feature is included in Enterprise. Premium plans can access it with the API Module add-on." The pricing page table lists API access as an add-on under Premium and Enterprise. It shows nothing for Free, Starter and Plus.

So the two pages differ on Enterprise. The help article says it is included, and the pricing table lists it as an add-on. Either way, Free, Starter and Plus do not have API access. Trustpilot publishes no price for it. So if a vendor quotes you a Trustpilot API price, it is not quoting a public Trustpilot figure.

Data Solutions is a separate product with its own sign-up. Trustpilot's Data Solutions guide says you join a waitlist and a team member gets in touch. Your organization can hold one active key at a time, and a new key cancels the old one.

How does Trustpilot API authentication work?

Trustpilot splits its endpoints into public and private. The authentication overview sets out the rules.

• Public APIs need only your API key, also called the Client ID. You send it as an HTTP header named apikey. Trustpilot warns against putting it in a query string, because that can expose it.
• Private APIs need OAuth 2.0. You send the token as Authorization: Bearer <token>.

Trustpilot lists four OAuth grant types: authorization code, implicit, client credentials, and password. The password grant is marked as deprecated. Access tokens expire after 100 hours. Refresh tokens expire after 30 days.

A public call looks like this.

curl "https://api.trustpilot.com/v1/business-units/find?name=example.com" \
  -H "apikey: YOUR_API_KEY"

Keep the key on your server. A key sitting in front-end code is a key anyone can copy.

What can and cannot the Trustpilot API do?

This is the part most people are really asking about.

It can read your reviews, both service and product. It can send invitations and make invitation links. It can post a reply to a review with POST /v1/private/reviews/{reviewId}/reply, and delete that reply. It can add, set and remove tags on a review. It can also create a Find Reviewer request for a review. All of that is in the Service Reviews API and the Invitations API.

It cannot delete a consumer's review. It cannot flag or report one either. Neither the Service Reviews API nor the Product Reviews API lists any endpoint for that.

The Deletions API sounds like it might, but it does the opposite job. It does not delete anything on Trustpilot. It returns the IDs of consumers and reviews that were already deleted there. If you store review data you pulled through the API, you must remove those records too. Trustpilot says to call it every 28 days.

So reporting a review stays a manual job inside Trustpilot Business. You pick one of the reasons Trustpilot lists, and Trustpilot decides. Our guide to Trustpilot's flagging rules covers how that process can go wrong.

What are the Trustpilot API rate limits?

Trustpilot gives a recommendation, not a hard table. Its rate limiting page says not to exceed 833 calls per 5 minutes or 10,000 calls per hour.

It also gives three ways to stay under that.

1. Use webhooks instead of polling for new data.
2. Reuse OAuth tokens. Do not request a new access token for every call.
3. Cache on your server. Store review data in your backend rather than fetching it from the browser on every page view.

The third point matters for anyone building a custom review block. If you only need to show reviews, a TrustBox widget may do the job with no code at all.

Is our review rule-check API the same thing?

No. It is worth being clear here, because the names sound alike.

Our review rule-check API is a free tool we built. It does not connect to Trustpilot and it does not touch your account. You send it the text of a review. It tells you which of Trustpilot's or Google's published rules the text may break, and which words matched.

It is a keyword heuristic, not a verdict. It needs no key, and it is rate limited per IP address. It cannot remove a review, and it cannot flag one. Trustpilot still decides every case.

A common setup uses both. You pull your reviews through the Trustpilot API, then run the text through our checker to see which ones may be worth a closer look. For a full read of your own profile by a person, ask for a free Trustpilot audit.

Where does that leave a business?

The Trustpilot API is useful for plumbing. It moves invitations out and review data in, and it lets you reply at scale. It does not change what is on your profile.

If the reviews themselves are the problem, the API will not help. What helps is reading each review against the published rules and flagging the ones that break them. Our guide to Trustpilot for Business covers the tools that come with the account. Our Trustpilot review removal service does the flagging work through your own account, and Trustpilot decides each case.

For the review problems that come up most in your category, see our pages for telehealth, GLP-1 weight loss and supplement brands.

For help with your own profile, start with our Trustpilot review removal service. Our review removal pricing is per confirmed removal, with nothing up front.