Base URL
Authentication
All endpoints require:x-cc-appheader with your partner app IDAuthorization: Bearer <token>header (exceptPOST /session)
Endpoint Groups
Common Patterns
Error Responses
All errors return a JSON object with amessage array:
Pagination
List endpoints currently return all results. No pagination parameters are required.ID Formats
- Cart IDs, Order IDs, Session IDs: UUID v4 format (
a1b2c3d4-e5f6-7890-abcd-ef1234567890) - Merchant IDs, Card IDs: Numeric integers
Token Refresh
When your token is near expiration, the API will include a refreshed token in theauthorization response header. Always check for this header and store the new token when present.