Request format
Content-Type: application/json- The three signature headers on every call — see Authentication
- A timestamp within 5 minutes of our clock
Response format
JSON with snake_case keys. Errors come in one of two shapes, and which one you get depends on the status:
Each status is documented under the endpoint’s own Errors section — for
example Create an order.
Rate limits
300 requests per 5 minutes, counted by source IP across all endpoints. Contact support if your integration needs a higher ceiling. Some endpoints carry a second, tighter limit, counted against your access key rather than your IP. Both limits apply to them.
Going over returns
429 Too Many Requests with a Retry-After header in
seconds:
List products
The catalogue, at your price
Create an order
The endpoint and its errors