REST • JSON • Webhooks • Idempotency

Your Ecommerce API for serious shipping

Products, carts, orders, payments and inventory—built for speed, predictable behavior, and clean DX. Start in minutes, scale to millions.

Try the Quickstart

99.9%

Uptime SLA

<120ms

Median latency

Stable contract

API health snapshot

Everything operational

Healthy

GET 200

/v1/products

Search + filters + pagination

POST 201

/v1/orders

Idempotent order creation

POST 202

/v1/webhooks/test

Verify signatures easily

GET 200

/v1/metrics

Usage + rate limit visibility

⚡

Designed for clean DX

Consistent errors, stable pagination, predictable filtering, and safe retries with idempotency keys.

Base URL: https://tencent.airbites.org/api

Explore endpoints Quickstart

Features built for production

A modern contract: predictable behavior, strong security, and building blocks you can trust.

Laravel-ready patterns: API Keys • HMAC • Webhooks • Rate limits

🔐

Secure auth

API Keys with scopes, rotation, and optional IP allowlists.

🪝

Webhooks

Order events, inventory updates, payment status—signed payloads.

🧠

Search & filters

Stable pagination, consistent sorting, and safe query operators.

⚙️

Idempotency

Retry POSTs without duplicates using Idempotency-Key.

Best practice defaults

Errors you can rely on, versioning you won’t fear.

Standardized error envelopes, typed validation details, and explicit API versions to keep integrations stable.

See endpoints Run a request

Core endpoints

A clean, opinionated surface: the stuff you need, the way you expect.

Base URL

Most used

Click to copy

Contract preview

Standard responses

Success (list)

200

{
  "data": [
    { "id": 101, "name": "Leather Sneakers", "price": 129.00, "currency": "GBP" },
    { "id": 102, "name": "Classic Hoodie",   "price":  89.00, "currency": "GBP" }
  ],
  "meta": {
    "page": 1,
    "per_page": 20,
    "total": 238,
    "has_more": true
  }
}

Error (validation)

422

{
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Invalid payload",
    "details": {
      "email": ["The email field must be a valid email address."],
      "items.0.qty": ["The qty must be at least 1."]
    }
  }
}

Quickstart

Copy, paste, ship. Use your API key and start listing products or creating orders.

Tip: Keep keys server-side. Use webhooks for async state changes.

# 1) Set your API key (server-side recommended)
API_KEY="YOUR_API_KEY"

# 2) List products (search + pagination)
curl -s "https://tencent.airbites.org/api/v1/products?query=sneakers&page=1" \
  -H "Accept: application/json" \
  -H "Authorization: Bearer ${API_KEY}" | jq

# 3) Create an order (safe retries)
curl -s "https://tencent.airbites.org/api/v1/orders" \
  -X POST \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer ${API_KEY}" \
  -H "Idempotency-Key: 3f8c2b2e-6c53-4fd4-ae13-9a2b4c0d2a11" \
  -d '{
    "customer": {"email":"alex@example.com"},
    "items": [{"product_id": 101, "qty": 1}],
    "currency": "GBP"
  }'

// Server-side is safest. Example: Node / edge / server action
const API_KEY = process.env.API_KEY;

async function listProducts() {
  const res = await fetch("https://tencent.airbites.org/api/v1/products?query=sneakers&page=1", {
    headers: {
      "Accept": "application/json",
      "Authorization": `Bearer ${API_KEY}`,
    },
  });
  return res.json();
}

async function createOrder() {
  const res = await fetch("https://tencent.airbites.org/api/v1/orders", {
    method: "POST",
    headers: {
      "Accept": "application/json",
      "Content-Type": "application/json",
      "Authorization": `Bearer ${API_KEY}`,
      "Idempotency-Key": crypto.randomUUID(),
    },
    body: JSON.stringify({
      customer: { email: "alex@example.com" },
      items: [{ product_id: 101, qty: 1 }],
      currency: "GBP",
    }),
  });
  return res.json();
}

<?php

use Illuminate\Support\Facades\Http;

// In Laravel, store key in .env (never in frontend)
$apiKey = env('ECOM_API_KEY');

$products = Http::withToken($apiKey)
    ->acceptJson()
    ->get("https://tencent.airbites.org/api/v1/products", [
        'query' => 'sneakers',
        'page'  => 1,
    ])
    ->throw()
    ->json();

$order = Http::withToken($apiKey)
    ->acceptJson()
    ->withHeaders([
        'Idempotency-Key' => (string) \Illuminate\Support\Str::uuid(),
    ])
    ->post("https://tencent.airbites.org/api/v1/orders", [
        'customer' => ['email' => 'alex@example.com'],
        'items'    => [['product_id' => 101, 'qty' => 1]],
        'currency' => 'GBP',
    ])
    ->throw()
    ->json();

Auth

Bearer token + scopes

Retries

Idempotency-Key

Events

Webhooks signed (HMAC)

Need an API key?

Create one in your admin panel, set scopes, and rotate safely.

Go to API Keys

FAQ

Common integration questions—answered quickly.

Question