YOUR_API_KEY in each example with your actual API key. All requests
require the x-api-version: 2025-11-01 header. This endpoint is open to all
API customers, with no per-endpoint grant needed.Request body
config
Response body
Create returns the whole watch, so you can confirm what was stored before the baseline run starts.Rate limits and credits
changes array. After that you
are charged per notification, one charge for each watched person that changed
on a run. A run that surfaces nothing costs nothing, and the rate does
not depend on how often you check (every_hours), only on
the data-freshness tier you pick
(5 credits at the default 30-day freshness). If your balance
is too low, the run is suspended rather than partially delivered.
For your own price per person, open the
watch builder in the dashboard.- Rate limit: 10 requests per minute on
/watch/person. Each watch path keeps its own budget. See Rate limits. - Watched list: up to 10,000 people per watch, editable at any time.
- Fixed at creation:
trackandfields. To change what you watch for, create a new watch.
Examples
What you can track
Person field reference
field path.Your first watch: tell me when they move
Watch one person and get a webhook whenever they start a new job.Understanding the response
idis the handle for everything else: pause, edit the list, cancel, and read run history all take it.fields: nullmeans the default minimal projection. The deliveredrecordwill carry onlybasic_profileandsocial_handlesuntil you request more.config.refresh_frequency_days: 30is the default freshness tier, and it is what sets the 5-credit rate. See Data freshness.last_run_at: nulluntil the baseline run completes.
How a watch runs
Create the watch
POST your entities, a track, a config, and one or more notifications
channels. The response returns the whole watch, including its id.Baseline run (free)
changes array and the record
projected to your fields. Use it to confirm your receiver parses the
envelope before a real change arrives. To read a person’s current profile on
demand, use Person Enrich.Recurring runs
every_hours), the watcher re-checks each person, diffs them
against their last snapshot, and delivers a notification for every person whose
track condition just became true. You are charged per notification at your
chosen freshness tier.changes: [], so a receiver that keys
on a non-empty changes array skips the whole baseline on its own.What a notification looks like
Every fired person carries two things: thechanges array, which is exactly what moved and is reported whatever fields says, and a record, the person’s current data projected to the fields you requested. The person’s identity travels inside the record as crustdata_person_id.
The example below is from a watch created with fields: ["basic_profile", "experience"].
results is a flat list, one object per fired person, each with its own changes and record. A changed scalar reports as { "field": …, "type": "changed", "from": …, "to": … }; an added array as { "field": …, "type": "added", "new_elements": [ … ] }.
To re-read a past run, or audit exactly what was delivered, the run-history endpoint returns the same content under a different envelope:
What you can track
Thetrack describes the change that triggers a notification. It is a tree of condition leaves, optionally combined with and / or groups.
A leaf has the shape:
=> and “less-than-or-equal”
as =<, not >= / <=. Those reversed forms return unknown operator.value is required for the comparison operators and omitted for changed and added.
Combine leaves with a group node, { "op": "and" | "or", "conditions": [ … ] }, to watch several signals at once. An or group fires if any child fires; an and group fires only when all conditions hold and at least one just became true. Groups nest.
Common person signals
Examples only. A person profile has 200+ addressable fields, and you can track any of them: any scalar withchanged, any array with added.
field paths address the same profile structure the Enrich API returns, so
browse the full set of trackable fields in the
Person Enrich reference. changed
requires a scalar path and added an array path. Mixing them returns a
400: "changed" on the array experience.employment_details.current is
rejected, and you want basic_profile.current_title instead.track and fields are different
Two independent knobs, and the distinction matters:
fields does not affect pricing. You are charged per notification at your chosen data-freshness tier, 5 credits at the default, no matter how many field groups you deliver. There is no wildcard: to receive the complete record, list every field group your key is entitled to. The delivered record uses the same schema as Person Enrich, with identical field-group names and nesting.
Choosing the entities
entities maps an identifier type to a list of values. A single watch holds up to 10,000 people.
Data freshness
config.refresh_frequency_days sets how fresh the tracked data is kept, meaning how recently each tracked field is refreshed before a run compares it against the last snapshot. It is independent of trigger.every_hours: every_hours is how often the watch checks and notifies; refresh_frequency_days is how up to date the data it checks against is, which is what decides how quickly a real change is detected.
Fresher data is priced higher. The per-notification charge is tiered by the freshness you choose:
Delivery channels
Add one or more channels tonotifications and every change fans out to all of them.
Where the records travel
By default a run’s change events arrive inside the notification, underresults. Set config.payload_delivery_type to "link" and the body carries no records at all. It carries metadata.payload_delivery.url instead, a pre-signed S3 URL for one NDJSON file holding every record of that run.
Switch when a run can outgrow what your receiver accepts. An AWS Lambda proxy integration caps a request at 6 MB and an ALB target at 1 MB, and an oversize body is refused whole.
metadata.payload_delivery.type rather than testing for results: a link watch falls back to an inline body if the file cannot be written. See Payload delivery.
Edit the watched list any time
Unlike a saved search, an Entity Watcher’s list is mutable. Add or remove people as your pipeline or contact list changes, without recreating the watch.PATCH the watch with a new entities object:
PATCH status (active / paused), config, and notifications.
Smoke-test your webhook
Before a real change ever fires, push one sample notification through a watch to verify your receiver end to end: signature check, JSON parsing, routing, without waiting for a person to actually move. The test delivers the exact envelope a real run sends, same shape and same signature headers, flagged withmetadata.test: true. It runs no diff, records no snapshot, costs no credits, and persists nothing.
POST. It is the shape of a real notification: only metadata.test: true and the sample values ("sample_text", 1234, …) mark it as a test. The changes array below is abbreviated to two entries; the full array mirrors your watch’s track.
record carries placeholder values with the exact shape of
a real notification, so your parser, signature check, and routing see
production structure without real person data. A changed scalar reports
{ "type": "changed", "value": …, "from": …, "to": … } (value is the
threshold target for >/< operators, null for a plain changed); an
added array reports { "type": "added", "new_elements": [ … ] }."count": 3 to receive three sample people in one envelope, with distinct crustdata_person_ids and summary.delivered: 3, so you can exercise how your receiver iterates results.
<timestamp>.<raw-body> keyed by your API key, delivered as
x-crustdata-signature: t=<unix>,v1=<hex>. A test that verifies here verifies
real deliveries.Manage your watches
List your watches: GET /watch/person
List your watches: GET /watch/person
status, page with limit and offset.Get one watch: GET /watch/person/{id}
Get one watch: GET /watch/person/{id}
last_run_at is null until the baseline run completes, then carries the most recent run’s timestamp.Pause or resume: PATCH status
Pause or resume: PATCH status
{ "status": "active" } to resume.Delete a watch: DELETE /watch/person/{id}
Delete a watch: DELETE /watch/person/{id}
204 No Content. Deletion is terminal: the watch cannot be resumed.Read a run's counters: GET /watch/person/{id}/runs
Read a run's counters: GET /watch/person/{id}/runs
records_searched: 2
is the list you sent, records_matched: 1 is the part of it that resolved, and
credits_deducted: 0 is the baseline being free. Read the counters to catch that
second URL: no other field reports an identifier that matched nothing.Reading a run
Every run carries five counters. Each one answers a different question, and two of the five apply to one watch kind only:records_searched minus
records_stale is records_after_filter. A large records_stale means the query
is broad and you have already seen most of what it finds.
On an entity run, a gap between records_searched and records_matched is the
part of your list that matches no record Crustdata holds. No other field reports
that gap, and every run skips those identifiers in silence.
new_records_count is below records_after_filter when max_results_per_run
cut the run short. On a realtime discovery watch, records_searched counts the
rows the live retrieval returned.
A first run is where those last two counters sit furthest apart. It delivers a
free sample of up to five records, so new_records_count is at most 5 however
large records_after_filter is. You did not lose the rest. The baseline marked
every one of those records as handled, which is why later runs report only
movement. A first discovery run has nothing to call stale yet, so records_stale
is 0 and records_searched equals records_after_filter.
records_matched and records_stale shipped after the other three. A run
that finished before then carries null for both, whatever its watch kind.Examples
Worked recipes you can copy, paste, and adapt. Each one is a full working request, verified against the live API. Swap the notification channel for your own. For every trackablefield path, see the Person Enrich reference.
Catch any career move on a roster
Catch any career move on a roster
or group fires on either.experience.employment_details.current is an array, so it takes added.
basic_profile.current_title is a scalar, so it takes changed. Swapping them
returns 400.Watch for a new credential
Watch for a new credential
Watch a headline for positioning changes
Watch a headline for positioning changes
Watch for a relocation
Watch for a relocation
basic_profile.location.raw is a scalar, so changed fires when someone’s stated location moves. Useful for territory assignment and for visa or right-to-work workflows.Watch for a new skill
Watch for a new skill
Fire once on crossing an audience threshold
Fire once on crossing an audience threshold
Detect a move faster with a fresher tier
Detect a move faster with a fresher tier
refresh_frequency_days: 7 keeps the tracked fields refreshed weekly, so a real job change surfaces within days rather than within the month. It costs 20 credits per notification instead of 5.every_hours does not make a change surface sooner on its own. The
watch can only report what the last refresh saw, so freshness is the knob that
controls detection latency, and the cadence is the knob that controls when you
hear about it.Deliver the full person record
Deliver the full person record
fields set.certifications is left out here because it needs a field-level entitlement.
Add it once your key has one; without it the create returns 403.Deliver a large run as a linked file
Deliver a large run as a linked file
{ changes, record } object, the same shape the inline body carries. See Payload delivery.Error handling
A person entity watch answers every failure the same way, whether you are creating a watch, editing the watched list, testing delivery, or reading run history.type is the machine-readable code you branch on, message is the sentence you
can show a user, and metadata carries per-problem detail when there is any.
Read error.message, not the top level: there is no detail key and no
non_field_errors key on any watcher response.
Every problem in one response
Validation collects every failure in one pass, so a payload with three things wrong costs one round trip rather than three.metadata carries one
entry per problem, and message is those entries joined in order:
Exact responses
Authorization header and a wrong key give the same 401 body, so
the response does not tell you which of the two happened.
POST /watch/widget/search returns the gateway’s
{"error_msg": "404 Route Not Found"}, and an entity path on a dataset that
has no entity watcher returns an HTML 404. Branch on the status code first,
then parse.Pricing
fields does not change the price, and neither does every_hours. A run where nothing changed costs nothing. See Data freshness for the full tier table and Pricing for the catalog.
What to do next
- Find people instead of tracking them: use the Person Discovery Watcher to deliver people who newly match a filter.
- Browse trackable fields: see the Person Enrich reference for every
fieldpath. - Read a profile on demand: use Person Enrich when you want current state rather than change.
- Choose how records travel: see Payload delivery for inline versus linked NDJSON.

