Getting started

Base URL

https://api.iordertrack.com/api

All endpoints are JSON over HTTPS. The full machine‑readable contract is the OpenAPI spec.

Authenticate

Programmatic callers authenticate with a personal access token (PAT) — a long‑lived, scoped credential a provider creates for their own store. Pass it as a bearer token:

Authorization: Bearer iot_pat_xxxxxxxxxxxxxxxxxxxxxxxx

See Authentication for how to create one and how scopes work.

Your first request

List the products in your store:

curl https://api.iordertrack.com/api/catalog/vendor-products?companyId=YOUR_COMPANY_ID \
  -H "Authorization: Bearer $IORDERTRACK_API_TOKEN"

The response is a JSON array of your listings, each joined to its product master and aggregated stock. Your token is scoped to a single company — requests for a company your token can't access return 403.

Prefer to use AI?

Install the AI Toolkit and let Claude work against your store directly — grounded in these docs and the real API schema, not guesses.