Skip to main content

Base URL

All API requests are made to:

Authentication

All endpoints require authentication via the x-firmly-authorization header:
See Authentication for obtaining access tokens.

Request Format

  • Content-Type: application/json for all POST/PUT requests
  • Accept: application/json
  • Domain Parameter: Most endpoints require a merchant domain (e.g., staging.luma.gift)

Response Format

All responses return JSON with consistent structure:

Success Response

Error Response

HTTP Status Codes

API Versioning

Firmly provides two API versions:
  • v1 - Simple Cart API endpoints
  • v2 - Full Cart API endpoints
Version is specified in the URL path: /api/v1/ or /api/v2/

Available APIs

Authentication

Token generation and session management

Catalog

Browse products and retrieve variant information

Session

Manage device sessions and preferences

Cart Management

Core cart operations for Full Cart API

Simple Cart

Streamlined cart operations for standard shipping

Promotions

Apply and manage promotional codes

Shipment Configuration

Configure fulfillment and shipping methods

Addon Management

Manage warranties and protection plans

Checkout

Complete the purchase flow

Payment

Secure payment processing

Common Headers

Required Headers

Optional Headers

Rate Limits

Contact support for current rate limit information.

Support

Need Implementation Help?

Implementation Guides

Step-by-step guides for building with Firmly APIs