# Shop - X-Radius API

> Base URL: https://x-radius.com/api/v1
> Auth: Authorization: Bearer xrt_...  (a manager API token)
> Envelope: {"data": ...}; lists add {"meta":{page,page_size,total,has_next}}
> Errors: {"error":{"code","message","request_id"}} - branch on code, never on message
> Timestamps: yyyy-MM-dd HH:mm:ss, UTC
> Money: a bare JSON number in major units, with an ISO-4217 currency code beside it
> Idempotency: redeem and activate endpoints take a client-supplied request_id (UUID)
>
> This page: https://x-radius.com/docs/api/shop
> Every group: https://x-radius.com/llms.txt

9 endpoints in 1 resource groups. 0 carry a hand-written reference entry with examples; the remaining 9 are generated from the running router and carry method, path, authentication, permission and rate-limit bucket, but no request or response example.

### Publish / unpublish card series to the shop

`POST /api/v1/admin/shop/batches/bulk-publish`

- Authentication: manager session (JWT) or API token
- Permission: `prm_shop_publish` (Publish / unpublish card series to the shop)
- Risk: write
- Rate limit bucket: `t_mutate`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### Publish / unpublish card series to the shop

`POST /api/v1/admin/shop/batches/{id}/publish`

- Authentication: manager session (JWT) or API token
- Permission: `prm_shop_publish` (Publish / unpublish card series to the shop)
- Risk: write
- Rate limit bucket: `t_mutate`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### Publish / unpublish card series to the shop

`POST /api/v1/admin/shop/batches/{id}/unpublish`

- Authentication: manager session (JWT) or API token
- Permission: `prm_shop_publish` (Publish / unpublish card series to the shop)
- Risk: write
- Rate limit bucket: `t_mutate`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### View the Card Shop

`GET /api/v1/admin/shop/readiness`

- Authentication: manager session (JWT) or API token
- Permission: `prm_shop_index` (View the Card Shop)
- Risk: read

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### GET /api/v1/admin/shop/sales

`GET /api/v1/admin/shop/sales`

- Authentication: manager session (JWT) or API token
- Permission: any one of `prm_shop_sales`, `prm_shop_sales_all`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### GET /api/v1/admin/shop/sales/{id}

`GET /api/v1/admin/shop/sales/{id}`

- Authentication: manager session (JWT) or API token
- Permission: any one of `prm_shop_sales`, `prm_shop_sales_all`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### POST /api/v1/admin/shop/sales/{id}/resend

`POST /api/v1/admin/shop/sales/{id}/resend`

- Authentication: manager session (JWT) or API token
- Permission: any one of `prm_shop_sales`, `prm_shop_sales_all`
- Rate limit bucket: `pay_init`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### Reveal a shop buyer's name and phone

`POST /api/v1/admin/shop/sales/{id}/reveal`

- Authentication: manager session (JWT) or API token
- Permission: `prm_shop_buyer_contact` (Reveal a shop buyer's name and phone)
- Risk: danger
- Rate limit bucket: `t_mutate`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._


### View the Card Shop

`GET /api/v1/admin/shop/storefront`

- Authentication: manager session (JWT) or API token
- Permission: `prm_shop_index` (View the Card Shop)
- Risk: read

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._