Zoho Bigin · api · fg-0112

Bigin email templates have no public API, but the web app's internal endpoint works

The public settings/email_templates path returns an error

Verified 2026-07-27 · Confirmed by 0 builders · Trust 50/100

Cause

The public Bigin v2 API does not expose email templates. The web app uses an internal v4.1 endpoint that needs a CSRF header built from the crmcsr cookie. On update it rejects the module field and requires name, subject and folder. The template HTML lives in both content and mail_content.

Fix

From a logged-in browser tab, call the internal endpoint with credentials included and the CSRF header. Send id, name, subject, content, mail_content, editor_mode and folder, and leave module out. Treat it as unofficial: it can change without notice.

Apply

fetch('/crm/v4.1/settings/email_templates/' + id, {method: 'PUT', credentials: 'include', headers: {'X-ZCSRF-TOKEN': 'crmcsrfparam=' + crmcsrCookieValue, 'Content-Type': 'application/json'}, body: JSON.stringify({email_templates: [{id, name, subject, content: html, mail_content: html, editor_mode: 'rich_text', folder: {id: folderId}}]})})

Affects: Bigin web app internal API v4.1, July 2026

claude mcp add --transport http footgun https://getfootgun.com/api/mcp