Skip to content

Overview

Server API conventions: authenticate with Authorization: Bearer sk_… (or a restricted rk_… key holding the operation’s key scopes). Pin the version with the TYS-Version header (a date, e.g. 2026-10-25; without it the latest version answers and the response’s TYS-Version says which). Errors are {error, status, code, doc_url, request_id}. POSTs accept an Idempotency-Key (responses stored 24 h). Lists are cursor-paginated (limit, cursor → data, has_more, next_cursor). Rate limits answer 429 with Retry-After; every response carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset.

Information

  • OpenAPI version: 3.0.3

The store’s publishable key (pk_test_… / pk_live_…). Safe in browsers; works only from the origins registered for the key.

Security scheme type: apiKey

Header parameter name: TYS-Publishable-Key

A secret key (sk_test_… / sk_live_…) or a restricted key (rk_test_… / rk_live_…) from your server: Authorization: Bearer sk_…. A secret key has every scope; a restricted key only the scopes it was created with. Each operation lists its key scopes.

Security scheme type: http

Was this page helpful?