Products
/v1/productsList products with filtering, sorting and pagination.
/v1/products/:slugGet detailed product information including versions, images and creator info.
Reviews
/v1/products/:slug/reviewsList reviews for a product with pagination.
/v1/products/:slug/reviewsBearerCreate a review. Requires a completed purchase. One review per product.
/v1/products/:slug/reviews/:idBearerEdit your own review.
/v1/products/:slug/reviews/:id/replyBearerReply to a review as the product creator. One reply per review.
Creator
/v1/creator/productsBearerList your products with pagination.
/v1/creator/productsBearerCreate a new product (starts in draft status).
/v1/creator/analytics/overviewBearerGet KPIs: revenue, sales count, views and conversion rate.
/v1/creator/analytics/revenueBearerGet revenue time series data grouped by day.
/v1/creator/analytics/productsBearerGet per-product performance metrics.
Checkout
/v1/checkout/createBearerCreate a Stripe Checkout session to purchase a product.
/v1/checkout/validate-discountBearerValidate a discount code without consuming it.
Library
/v1/libraryBearerList your purchased products.
/v1/library/:purchaseId/downloadBearerGet a presigned download URL (expires in 15 minutes).
API Keys
/v1/creator/api-keysBearerCreate an API key. The plaintext key is returned only once.
/v1/creator/api-keysBearerList your API keys (without the key value).
/v1/creator/api-keys/:idBearerRevoke an API key permanently.
Webhooks
Webhooks deliver real-time notifications via HTTPS POST. Each delivery includes an X-OCB-Signature header (HMAC-SHA256 of timestamp.body) and a X-OCB-Timestamp.
/v1/creator/webhooksBearerCreate a webhook endpoint. Max 5 per creator. Signing secret returned once.
/v1/creator/webhooksBearerList your webhook endpoints.
/v1/creator/webhooks/:idBearerUpdate webhook URL, events, or active status.
/v1/creator/webhooks/:idBearerDelete a webhook endpoint.
Using API keys
Instead of a Bearer token, you can authenticate with an API key using the X-API-Key header. API keys have scoped permissions — only endpoints matching your key's scopes will be accessible.
-H "X-API-Key: ocb_live_your_key_here"
products:readRead product dataproducts:writeCreate and update productsanalytics:readView analytics datadownloads:readAccess download links and librarywebhooks:writeManage webhookspurchases:writeBuy products on behalf of the key owner