Authentication
All Merchant API endpoints require authentication via the session token obtained during login. The endpoints automatically identify the merchant from the authenticated session context.Base Path
All merchant endpoints are prefixed with:Role-Based Access Control
Many endpoints implement role-based access control with three levels:- Owner: Full access to all operations including deletion and name changes
- Admin: Management access to most resources
- Staff: Read access and limited write operations
403 Forbidden if the authenticated user lacks the required role.
Available Resources
The Merchant API is organized into several resource groups:Settings
Manage merchant settings, business hours, and preferences
Locations
Manage business locations and addresses
Services
Create and manage services and service groups
Products
Track inventory products and stock levels
Team
Manage team members and their roles
Customers
Manage customer information and blacklists
Blocked Times
Create time blocks for unavailability
Integrations
Connect external calendar services
Common Patterns
Response Format
Successful responses return JSON with the appropriate status code:Timestamps
All timestamps are returned in RFC3339 format:Currency
Prices are represented with both currency code and formatted display:Dashboard Endpoint
Get dashboard data including upcoming bookings, statistics, and low stock alerts:The reference date in RFC3339 format
Number of days for the period
Start of the reporting period
End of the reporting period
List of upcoming bookings with customer and service details
Most recent bookings
Products with low stock levels
Revenue, bookings, cancellations, and duration statistics with period-over-period changes