Making requests

Base URLs, required headers, request format, and content-type conventions.

Base URL

https://api.giftronaut.com/api/v1

Both Sandbox and Production use the same URL. The environment is determined by your credentials. See Sandbox vs Production for details.

Required headers

Header	Value	Required
`Authorization`	`Bearer {access_token}`	Yes
`Content-Type`	`application/json`	For POST/PUT/PATCH
`X-Request-Id`	UUID v4	Recommended

Request example

POST /api/v1/orders
Authorization: Bearer eyJhbGci...
Content-Type: application/json
X-Request-Id: 550e8400-e29b-41d4-a716-446655440000

{
  "orderType": "ONE_TIME",
  "cardType": "BRANDED_CARD",
  "cardId": "card_amzn_us_100",
  "unitPrice": 100.00,
  "currencyCode": "USD",
  ...
}

Correlation ID

If you include X-Request-Id, it is echoed back in every response. This makes it easy to trace a specific request in logs or support tickets.