POST/api/v1/orders

Place an order

Creates orders from validated cart items. One order per tenant.

Authentication

Requires an API key with the orders:write scope.

Request Body

{
  "type": "object",
  "properties": {
    "items": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "productId": {
            "type": "string",
            "format": "uuid"
          },
          "qty": {
            "type": "integer",
            "exclusiveMinimum": true,
            "minimum": 0
          }
        },
        "required": [
          "productId",
          "qty"
        ],
        "additionalProperties": false
      },
      "minItems": 1,
      "maxItems": 50
    },
    "shippingAddressId": {
      "type": "string",
      "format": "uuid"
    }
  },
  "required": [
    "items",
    "shippingAddressId"
  ],
  "additionalProperties": false
}

Responses

200Successful response

400Bad request — invalid input

401Unauthorized — missing or invalid API key

403Forbidden — key revoked, expired, or insufficient scope

429Too many requests — rate limit exceeded

500Internal server error