Base URL
Authentication
Exchange an Auth0 ID token for a session cookie:Set-Cookie header. Extract the name=value pair (everything before the first ;) and pass it as a Cookie header on authenticated requests:
Set-Cookie from the login response and passes it back directly on every subsequent request.
Make a request
Most product endpoints are public and don’t require a cookie:Cookie header:
Response format
List endpoints return a consistent shape:total to drive pagination. Detail endpoints return the same shape with a single item in results.
Error responses
| Status | Meaning |
|---|---|
400 | Validation error — check your request body |
401 | Not authenticated — send a valid session cookie |
402 | Feature requires a higher billing tier |
403 | Forbidden — triggers session logout on the client |
429 | Rate limited — only applies to unauthenticated non-GET requests |
