Updated Oct 2026

Trustpilot API: read and reply to your Trustpilot reviews

The Trustpilot API gives you two kinds of access. Public endpoints return published reviews with just an API key. Private endpoints, which you need to read private review data and reply, require an OAuth 2.0 token for a business user and the paid API module. Prisma wraps both into one REST call, so you can read and reply to Trustpilot reviews with the same key you use for Google, App Store and Google Play.

Get API key

2 locations free. No card required.

How the official Trustpilot API works

Trustpilot calls each company profile a business unit. Every review belongs to one business unit, and every call to the Trustpilot API either reads public data about it or acts on it as an authenticated business user.

Public vs private endpoints

Both list endpoints are capped at 100,000 records per business unit, according to the Business Units API reference. If you need more history than that, you need another route.

Getting a Trustpilot API key

Your API key is the Client ID of an application you create in Trustpilot’s developer portal, and your API secret is its Client Secret. You need both to request tokens. Access itself is sold as the API module, an add-on for Trustpilot for Business. Trustpilot lists three tiers: 200,000 calls a year (Tier 1), 1,000,000 calls a year (Tier 2) and unlimited (Tier 3). Enterprise plans include Tier 1. Trustpilot does not publish the add-on price. Step-by-step: how to get a Trustpilot API key.

OAuth for private endpoints

Private endpoints accept four grant types: authorization code, implicit, client credentials, and password (deprecated). Access tokens last 100 hours. Refresh tokens last 30 days and are only issued with the authorization code and password grants. Refresh too often and Trustpilot answers with HTTP 429, so you refresh when the token expires, not on every request.

Replying to reviews

A reply is a POST to /v1/private/reviews/{reviewId}/reply with a message and the authorBusinessUserId of the person replying. A DELETE on the same path removes it. Both need a business user token.

What the Trustpilot API doesn’t tell you

The documentation is good. The gaps show up when you run it in production.

• You pay before you write a line of code. The API module is an add-on with yearly call allowances. You will negotiate a tier before you know how many calls you need.
• Two auth systems in one integration. Reads can run on an API key, replies need OAuth. You end up storing keys, secrets, access tokens and refresh tokens, and rotating them on different clocks.
• MFA blocks some grants. Trustpilot’s authentication docs say users must turn off multi-factor authentication for the password, authorization code and implicit grants. Your security team will ask about that.
• Rate limits are a recommendation, not a contract. Trustpilot recommends staying under 833 calls per 5 minutes and 10,000 calls per hour. Polling 40 business units every minute already breaks the first number.
• Service reviews and product reviews are different APIs. Product reviews live in the Product Reviews API with their own endpoints and private variant. If you sell on a shop, you integrate twice.
• Trustpilot is one source of several. Your customers also review you on Google, the App Store and Google Play. Each one has its own auth, pagination and JSON shape.

Read and reply to Trustpilot reviews with Prisma

Prisma is a unified reviews API for businesses and apps you own. You connect your Trustpilot business unit once through OAuth, and Prisma handles tokens, refreshes, pagination and retries. Trustpilot reviews come back in the same JSON as your Google, App Store and Google Play reviews.

1. Connect your Trustpilot business unit

curl -X POST https://api.prismareviews.com/v1/connections \
  -H "Authorization: Bearer $PRISMA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"platform": "trustpilot"}'
# Returns an authorization_url. Open it, sign in as a Trustpilot business user, done.

2. Read your latest Trustpilot reviews

curl "https://api.prismareviews.com/v1/reviews?platform=trustpilot&location_id=loc_123&since=2026-10-01" \
  -H "Authorization: Bearer $PRISMA_API_KEY"

{
  "data": [
    {
      "id": "rev_8f2c",
      "platform": "trustpilot",
      "location_id": "loc_123",
      "rating": 2,
      "text": "Delivery took 9 days and nobody answered my email.",
      "author": "Laura M.",
      "created_at": "2026-10-14T09:12:00Z",
      "reply": null,
      "url": "https://www.trustpilot.com/reviews/..."
    }
  ]
}

3. Reply from your code

// Node.js 18+
const res = await fetch("https://api.prismareviews.com/v1/reviews/rev_8f2c/reply", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.PRISMA_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    text: "Hi Laura, sorry about the delay. We've refunded shipping and sent you a direct email.",
  }),
});
console.log(await res.json());

# Python 3
import os, requests

r = requests.post(
    "https://api.prismareviews.com/v1/reviews/rev_8f2c/reply",
    headers={"Authorization": f"Bearer {os.environ['PRISMA_API_KEY']}"},
    json={"text": "Hi Laura, sorry about the delay. We've refunded shipping and sent you a direct email."},
)
print(r.json())

4. Get notified instead of polling. Subscribe to the review.created, review.updated and reply.published webhooks and stop counting calls against Trustpilot’s limits.

Full parameter list in the API reference. First call in five minutes with the quickstart.

Official Trustpilot API vs Prisma

If you only need Trustpilot and you use invitations or tags heavily, the official API is the right tool. If you need to read and reply across Trustpilot and Google from one codebase, Prisma saves you the second, third and fourth integration. See all integrations, the Google reviews API, the App Store reviews API and the Google Play reviews API.

FAQ

Is the Trustpilot API free?

No. Trustpilot sells API access as a paid API module add-on for Trustpilot for Business, with tiers of 200,000, 1,000,000 or unlimited calls per year. Enterprise plans include Tier 1.

What is the difference between the public and private Trustpilot API?

Public endpoints only need your API key in an apikey header and return published data. Private endpoints need an OAuth 2.0 access token for a business user and let you read private review data and reply.

Can I reply to Trustpilot reviews through the API?

Yes. POST /v1/private/reviews/{reviewId}/reply posts a reply and DELETE on the same path removes it. Both need a business user OAuth token.

What are the Trustpilot API rate limits?

Trustpilot recommends staying under 833 calls per 5 minutes and 10,000 calls per hour.

Can Prisma read Trustpilot reviews of other companies?

No. Prisma only connects business units you own or manage, through OAuth. It is not a scraper.

How much does Prisma cost for Trustpilot?

Prisma charges per connected location, and each Trustpilot business unit counts as one. The first 2 are free, and paid plans start at €49 a month for up to 10. See pricing.