Base URL
Response shape
Successful JSON responses usually return a payload object (sometimes wrapped). Errors return HTTP status codes with a machine-readableerror or message field. Always check status before parsing.
Versioning
Dashboard session routes use unversioned paths (/api/dashboard/..., /api/orders, etc.).
Merchant integrations use a versioned prefix:
Authorization: Bearer mk_live_... — not session cookies.