Toreca Cloud Partner API

An API for external apps a shop has approved. Call it with the access token from the OAuth 2.1 authorization code flow (PKCE S256) in Authorization: Bearer. The token decides which shop’s data you work with.

Every response carries Cache-Control: no-store. Errors look like { "error": "code" }.

Connection

Create, check and end the connection with a shop. Either read scope works.

• GET
  Get the connection/connection
• POST
  Create the connection/connection
• DELETE
  End the connection/connection

Buy boosts

Cards and BOXes a shop is buying above its usual price. Readable with purchase-boosts:read.

• GET
  List buy boosts/purchase-boosts

Inventory

Sync of sites, storage locations and stock units. Needs inventory:read.

• GET
  List sites and storage locations/inventory/sites
• GET
  Read inventory changes/inventory/changes
• GET
  Get a unit's photo/inventory/items/{id}/photos/{side}

Card catalog

Search Toreca Cloud’s card catalog. Needs inventory:read.

• GET
  Search the card catalog/cards
• GET
  Get a card/cards/{id}

Change notifications

Register a webhook that tells you stock changed. Needs inventory:read.

• PUT
  Register the webhook/webhook
• DELETE
  Remove the webhook/webhook