{
"id": "<string>",
"type": "sales.order.created",
"created": "2023-11-07T05:31:56Z",
"data": {
"order_id": "<string>",
"number": "<string>",
"customer_id": "<string>",
"quote_id": "<string>"
}
}Salesordercreated
A sales order was taken, by hand or from an accepted quote.
Check the StockShift-Signature header before you act on it: v1 is the HMAC-SHA256 of <t>.<raw body> under the endpoint’s signing secret. Reject a t more than five minutes old.
{
"id": "<string>",
"type": "sales.order.created",
"created": "2023-11-07T05:31:56Z",
"data": {
"order_id": "<string>",
"number": "<string>",
"customer_id": "<string>",
"quote_id": "<string>"
}
}Authorizations
For your own scripts and server-to-server integrations. Create a key in the app under Settings > Access > API keys and copy it then, because it is shown once. Send it as Authorization: Bearer <key>. The key acts as the member who made it, in the organization it was made in. A call needs the member's permission and one of the key's scopes, such as inventory:read or sales:write. A key with * has every scope.
Headers
"t=1760000000,v1=5257a869e7ecebeda32affa62cdca3fa51cad7e77a0e56ff536d0ce8e108d8bd"
Body
Response
Answer with any 2xx within 10 seconds. Anything else, or no answer in time, is retried with backoff for up to 24 hours.
Was this page helpful?