Zoop.money · Integration hub
developer.zoop
Build home loans into your stack.
Explore demo APIs, webhooks, SDKs and connectors for builders, banks and channel partners. Clear data boundaries from day one.
- Push bookings from your CRM as Zoop leads
- Get loan status webhooks on every stage
- Embed the 'Get home loan' widget on your booking page
- Pull receivables & payout statements
Integration options
REST API
Leads, applications, offers, documents and payouts. JSON over HTTPS, OAuth 2.0.
Webhooks
Signed events for every stage change — sanctioned, disbursed, rejected, registration booked.
Embed widget
One script tag adds eligibility check & loan offers to your booking page.
SDKs
Node, Python, Java and .NET clients with typed models and retries.
SFTP & CSV
Nightly file drops for teams without APIs. Your columns, your format.
Prebuilt connectors
Salesforce, SAP, Sell.Do, Farvision, LeadSquared, Zoho — managed by Zoop.
Quick start · create a lead
curl https://api.zoop.money/v1/leads \
-H "Authorization: Bearer zk_test_••••" \
-H "Content-Type: application/json" \
-d '{
"project": "prestige-lakeside",
"unit": "T4-1203",
"buyer_ref": "demo_buyer_017",
"consent_ref": "demo_consent_017",
"agreement_value": 18500000
}'Webhook · application.sanctioned
{
"event": "application.sanctioned",
"application_id": "ZP-24077",
"lender": "HDFC Bank",
"project": "prestige-park-grove",
"unit": "B-1502",
"sanctioned_at": "2026-11-12T10:42:00+05:30"
}API reference
| POST | /v1/leads | Create a buyer lead from a booking |
| GET | /v1/applications/:id | Loan status, lender and stage history |
| GET | /v1/applications?project=… | All applications for a project |
| POST | /v1/external-loans/track | Track a non-Zoop loan by application number |
| POST | /v1/apf/submissions | Submit an APF pack to lenders |
| GET | /v1/payouts?month=2026-10 | Developer payout statement |
| POST | /v1/lender/decisions | Banks: post sanction or rejection |
Repositories
zoop-money/zoop-node
Official Node.js / TypeScript SDK
zoop-money/zoop-python
Official Python SDK with async support
zoop-money/zoop-java
Java SDK for bank core & LOS integrations
zoop-money/salesforce-zoop-connector
Managed package: bookings ↔ loan status
zoop-money/lender-decision-adapter
Map your LOS decisions to Zoop sanction events
zoop-money/zoop-embed
Drop-in eligibility & offers widget
zoop-money/webhook-verifier
Signature verification samples in 6 languages
zoop-money/docket-sftp-sample
Reference SFTP pickup for disbursement dockets
Trust & data responsibility
Less data. Clearer boundaries.
DPDP Act, 2023 · proposed production safeguards, not a claim of compliance or certification.
“No PII stored” is not our claim.
Loan applications require personal information. The goal is to minimise collection and prevent unnecessary copies in partner systems. Application IDs linked to people remain personal data; tokenisation is not anonymisation.
Current mock-up: no live bank connections, issuer checks or server-side document storage. Save & resume keeps entered application details in this device’s browser, without production-grade protection. Use fictional information only.
Purpose before collection
Give each applicant a clear notice: what is collected, why, which lender receives it and how to exercise their rights. Record consent where relied on; do not bundle marketing consent into a loan application.
Status, not identity documents
Builder and referral integrations should receive only necessary application references and milestones. No PAN, Aadhaar, income, CIBIL report or document attachments in routine status events.
Restricted document delivery
Proposed production design: encrypted document storage, scoped lender access, short-lived download links and an access trail. No public buckets, documents in logs or secrets in browser code.
Retention with a reason
Define retention by purpose, applicable lending obligations and legal holds. Delete data when no longer needed and legally permitted; cover processors and backups, not just the visible application.
Data-sharing boundaries
Illustrative scopes. Production must enforce consent or another applicable lawful basis, purpose, recipient and access permissions on every request.
{
"recipient": "builder",
"scope": "applications.status:read",
"application_ref": "demo_app_24077",
"booking_ref": "demo_booking_88213",
"stage": "sanctioned",
"occurred_at": "2026-11-14T08:00:00Z"
}No raw identity, salary, bureau data or document links. References can still identify a buyer when joined with CRM records.
DPDP readiness
Notice & consent
Identify Zoop, the lender and integration partner’s responsibilities in contracts. Maintain the notice version, purpose, consent record where applicable, recipients and withdrawal history for each applicant.
Access, correction & erasure
Provide a route to request a summary of personal data and sharing, correction, completion, updating and erasure, subject to applicable law. Authenticate the requester; do not expose another applicant’s information.
Withdrawal & grievances
Make consent withdrawal as easy as giving it where consent is the basis. Explain consequences for an active application without blocking the request. Provide grievance redressal and nomination arrangements as applicable.
Security & breach response
Plan least-privilege access, key rotation, tenant isolation, security testing and breach response. Assess notification duties to affected individuals and the Data Protection Board under applicable provisions and rules.
Children & cross-border processing
Assess age-related obligations, applicable exemptions and any restrictions on overseas processing. DPDP is not a blanket India-only hosting rule; sector-specific lending requirements must be evaluated separately.
Before a connector goes live
| Review | Production requirement | This mock-up |
|---|---|---|
| Partner contract | Purpose, responsibilities, processor terms & sub-processors | Illustrative only |
| Access & delivery | Scoped credentials, signed events, replay protection & audit trails | No live endpoints |
| Logs & exports | Redaction, controlled CSV fields, export access & expiry | Synthetic examples |
| Retention & deletion | Documented schedule, withdrawal workflow & legal exceptions | Device-local saved journey |
| Security assurance | Independent testing and evidence for any certification claim | Not certified |
Readiness guidance only, not legal advice. Before launch, confirm applicable commencement dates, DPDP rules and sector-specific lending obligations with qualified counsel. No certification, uptime guarantee or regulatory approval is represented by this demo.
No dev team? We'll build the connector.
Zoop's integration team maps your CRM or ERP and runs it for you.
Demo documentation — endpoints, repositories and keys are illustrative and not live.