Developer docs

SwagByte has a REST API for programmatic ordering, design management, and webhook events. Authenticate with a session cookie or an API key (corporate accounts only). Sandbox + production share the same shape — point at a different host.

Guides

Quickstart

Auth, your first request, and where to look up endpoint details.

Submitting orders via API

End-to-end: products → cart → checkout/submit → polling order status.

Verifying webhook signatures

Validate the HMAC SHA-256 we send on every outbound webhook.

API reference

Browse the full endpoint catalog under /docs/api. Each endpoint is grouped by resource (Products, Designs, Cart, Checkout, Orders) with auth, request shape, and response shape.

Auth at a glance

public: no auth needed (catalog browse, guest order lookup, checkout/quote).
session: signed-in cookie (most account routes).
owner: authenticated session OR guest sb_anon cookie. Lets the same endpoints serve guests + auth users.
admin: corporate-admin role required.
system: requires SYNC_API_SECRET bearer (cron jobs, webhooks).