Skip to main content
One HTTPS endpoint, one API key, and read access to everything that belongs to your account. There is no SDK to install and no token to refresh. If you can make an HTTP request, you can use it.

How it behaves

Read only

Every endpoint is a GET. Nothing you call here can change an order, a refund or a customer.

Scoped by your key

You only ever receive your own data. There is no account filter to pass, and none to get wrong.

Same shape everywhere

One error envelope, one date convention, one pagination model, across every resource.

Two things that surprise people

to is exclusive

For all of April, use from=2026-04-01 and to=2026-05-01, the day after your intended last day. The widest window you can ask for is 90 days.

limit truncates, it does not paginate

limit goes up to 5000 and defaults to 1000. When meta.truncated is true there is more data behind it, so narrow the window. Records come newest first.

When something goes wrong

Every error comes back in the same envelope:
The correlation_id is always present, in the body and in the x-correlation-id header. Include it when you open a support ticket and we can trace your exact request.

Next

Authentication

How the pag_ key works, how to send it, and how to keep it safe.

API Reference

Every resource, every parameter, and a “Try it” playground.