Kampusin Developer Portal

Connect your systems and mobile apps to campus academic data: secure, documented, and ready to test in minutes.

↓ Learn more

Instant Sandbox Key

Test your integration with synthetic data without touching campus data.

Controlled Production Access

Apply with a purpose, scopes, and a privacy policy; the campus decides.

Signed Webhooks

Study plan, grade, payment, and diploma events are delivered to your system.

OpenAPI for Postman

Import the specification into Postman or a client generator to get started faster.

Layered Security

Rate limiting, CSRF protection, key hashing, webhook signatures, and audit trails.

Find the Kampusin API that fits your needs.

Mobile Apps

Build student and lecturer apps on the App API: log in with a username and MFA, show schedules, grades, study plans, and invoices, and send notifications to users.

Students can pay invoices through Kampusin Pay and join online classes with tamper-resistant attendance proof.

Data and Business Intelligence

Pull study program, student, class, grade, and AKM data into a data warehouse, BI dashboards, or an alumni portal through the Public API v1.

Each system uses its own key with read-only scopes and a rate limit, so access is easy to control and revoke.

Finance and Payments

Banks and aggregators can report Virtual Account payments through signed inbound webhooks, with replay protection and automatic settlement against invoices.

Your finance system can receive payment received events whenever a payment is recorded, including from Kampusin Pay.

Academic Automation

React to study plans submitted and approved, grades locked, graduation decided, and diplomas issued through outbound webhooks, with no polling.

Deliveries use HMAC-SHA256 signatures, staged retries, and a delivery ID to avoid duplicate processing.

Two environments, two access levels.

Sandbox

Right after you sign up

A key is issued automatically for each application
Synthetic data: no campus data is touched
All read scopes, 30 requests per minute
Same response shape as production

Production

Through campus approval

Apply with a purpose, scopes, and a privacy policy
University admins review and approve
Only approved scopes, rate limit as approved
Revocable; every use is logged

The sandbox currently covers the Public API v1. A sandbox environment for the App API (mobile apps) is not available yet; testing uses test accounts from the campus.

Get started in five steps.

1Sign upEnter your name, email, organization, and integration purpose.
2Get a sandbox keyCreate an application; the key is issued automatically and shown once.
3Read and testDocumentation, endpoint catalog, and OpenAPI.
4Request productionDescribe your data needs and include a privacy policy.
5Issue a production keyOnce approved, start connecting to real data.

Frequently asked questions

Who can sign up?

Anyone building an integration with Kampusin: campus developers, vendors, or partners. Developer accounts are separate from campus user accounts. Access to real data still requires campus approval.

Does the sandbox use campus data?

No. The sandbox uses synthetic data unrelated to real students. The response shape is the same as production so your integration is ready to move over.

How is production access approved?

You apply from the console with a purpose, scopes, estimated request volume, and a privacy policy URL. University admins review it, can narrow the scopes or rate limit, and can reject or revoke access.

Is there an official SDK?

There is no official SDK yet. Use the OpenAPI file to generate a client automatically in the language of your choice; the documentation includes Kotlin, Swift, and JavaScript examples for authentication.

Can I test a mobile app in the sandbox?

The sandbox currently covers the Public API v1. For the App API used by mobile apps, testing uses test accounts provided by the campus. A mobile-specific sandbox is planned.

How are API keys protected?

A key is shown once and stored as a hash on the server. Keys can be disabled, revoked, and rotated at any time. Every use is logged, and calls are rate-limited per minute. Call the API from your server, not from a browser or client app.