Gift card API
Programmatic gift card fulfillment for platforms that need to issue value inside their own product: rewards and cashback, employee recognition, marketplace payouts, in-app rewards stores. The same catalog, pricing engine, inventory locking and fulfillment pipeline that runs the storefront, exposed over HTTP.
Catalog & stock
Read brands, country-scoped products, denominations, live unit counts and regional pricing so you never sell a SKU that is out of stock.
Idempotent orders
Create an order with your own idempotency key. Retries return the original order instead of double-charging or double-claiming inventory.
Signed webhooks
Delivery, payment and refund events are POSTed to your endpoint with an HMAC signature over the raw body. Replays are safe to ignore by event id.
Code retrieval
Codes are encrypted at rest and returned once, on an explicit authenticated reveal call. Every reveal is written to an immutable audit log.
Webhook events
| order.created | Order accepted, payment not settled yet |
| payment.pending | Provider has the payment, awaiting settlement |
| risk.review | Order held for manual verification |
| order.fulfilled | Codes claimed and ready to reveal |
| order.failed | Payment declined or risk rejected; inventory released |
| refund.processed | Refund settled back to the original method |
Access and security
Keys are issued per environment. Sandbox keys hit a mock supplier and mock payment provider so you can drive pending, under-review, rejected and fulfilled outcomes without spending money. Production keys are scoped to your account, rate limited, and every call is attributed in the audit log.
Verify the webhook signature before trusting a payload, and treat code retrieval as a one-shot operation: store the returned code in your own encrypted storage rather than re-fetching it.