Skip to content

Overview

The Admin API lets you build apps and integrations that extend the Kreezalid back office of your marketplace: synchronize your catalog, users and orders with other systems (ERP, CRM, PIM…), automate your operations, or build your own backup. Every call acts as the marketplace owner, on the whole marketplace.

The Admin API is organized around REST: it uses resource-oriented URLs, accepts JSON request bodies and returns JSON responses.

If anything is missing or seems incorrect, please contact our support team.

Getting started

Obtaining your API credentials

The Admin API authenticates you with HTTP Basic authentication: your API key is the user name and your API secret the password. Treat them like a password: never share them with an untrusted party or ship them in a browser or mobile app.

To generate your credentials:

  1. Open your back office, for example https://acme.mykreezalid.com/admin.
  2. Go to Settings → Account (/admin/settings/account).
  3. In the API access section, click Enable API access (or Generate secret key).
  4. Note down your API key and API secret.

Base URL

If you don’t use a custom domain, use your marketplace’s subdomain:

https://acme.mykreezalid.com/api/v1

If you connected a custom domain, you must use it in your API calls. Use your primary domain exactly as it is configured (with or without www):

https://www.example.com/api/v1

Status and error codes

Every response carries an HTTP status code that tells you more about the outcome.

400 Bad Request

A parameter is not valid, for example an ID filter that holds something other than positive integer IDs.

403 Forbidden

The credentials are missing or wrong. Check them, and check the base URL: it must be your marketplace’s primary domain.

404 Not Found

The resource does not exist, or the endpoint is not one of this API’s.

5xx Errors

An internal error occurred in Kreezalid. Our technical team has been notified.

Some write endpoints answer with HTTP status 200 even when they refuse the change: their body then carries success: false and a message with the reason. Each endpoint below says when this is the case.

Information

  • OpenAPI version: 3.0.0

HTTP Basic authentication: send your API key as the user name and your API secret as the password.

Security scheme type: http