Skip to main content

How to Connect Rock RMS

4 min readUpdated May 11, 2026

Connect Rock RMS

Rock RMS is a self-hosted church management platform, so each church has its own server URL. PrayerConnect supports two authentication options: a REST API Key (recommended) or a Username and Password fallback.

Prerequisites

Before connecting, you'll need:

  • The public URL of your Rock server (for example, https://rock.yourchurch.org)
  • Either a Rock REST API Key or admin username and password
  • Rock REST API enabled (it is by default)

Option A — REST API Key (recommended)

  1. Sign in to Rock as an administrator
  2. Go to Admin Tools → Security → REST Keys
  3. Click + Add and create a new key (e.g. "PrayerConnect")
  4. Assign it to a user account that has access to People, Groups, and Campuses
  5. Copy the generated API Key value
In PrayerConnect:

  1. Go to Settings → Integrations
  2. Open the Rock RMS card
  3. Choose the API Key tab
  4. Enter your Server URL and paste the API Key
  5. Click Test Connection, then Connect

Option B — Username and Password

If you prefer not to create an API key, you can use an existing Rock admin login.

  1. Open the Rock RMS card in PrayerConnect
  2. Choose the Username & Password tab
  3. Enter your Server URL, username, and password
  4. Click Test Connection, then Connect
PrayerConnect calls Rock's /api/Auth/Login endpoint and stores credentials encrypted at rest.

What Gets Synced?

Rock EntityPrayerConnect
Active PeopleContacts
Primary EmailContact Email
Mobile PhoneContact Phone
Active GroupsPrayer Groups
CampusesMulti-campus filter
After connecting you can choose which campuses to sync in the Sync Settings dialog.

Troubleshooting

"Could not reach server"

  • Confirm the server URL is publicly accessible (HTTPS recommended)
  • Try https://your-rock-url/api/People?$top=1 in a browser

"Unauthorized"

  • API Key: confirm the key is active and assigned to a user with read access
  • Username/Password: confirm the user can sign in to Rock directly

Missing People

  • Only Active people are synced
  • People must have at least an email or phone number

Security

  • Server URL, API key, username, and password are all encrypted with AES-256 before being stored
  • You can disconnect at any time from Settings → Integrations

Was this article helpful?