📡 API docs
Authenticate with header: X-API-Key: <your-key> (generate at API keys).
GET /api/v1/cards
Search the card catalog.
curl -H "X-API-Key: $KEY" "https://cardmarket-staging.fly.dev/api/v1/cards?q=tatis"
GET /api/v1/listings
List active listings (filter by variant_id, max_price, condition).
curl -H "X-API-Key: $KEY" "https://cardmarket-staging.fly.dev/api/v1/listings?variant_id=42&max_price=50.00"
GET /api/variant/<id>/forecast
30-day linear price forecast.
GET /api/auction/<listing_id>/bid-history
JSON list of bids for charting.
POST seller webhook
Configure callback URLs at /seller/webhooks. Each fire is signed with HMAC-SHA256 in X-Rip&List-Signature; payload events include sale, offer, refund.
Rate limits
- 60 requests/minute per key (bursts of 100)
- 10MB max response payload