API v1

REST API reference

JSON over HTTPS. Authenticate every request with a bearer API key issued from your dashboard.

Base URL

https://api.subtrackr.io

Authentication

Pass your API key as a bearer token. Keep it server-side; never embed it in browsers.

curl https://api.subtrackr.io/v1/customers \
  -H "Authorization: Bearer sk_live_xxx"

Errors

Standard HTTP codes. 4xx errors include a JSON body with a code and human message.

Rate limits

300 requests per minute per API key. Burst of 50. X-RateLimit-* headers on every response.

Endpoints

GET/v1/customersList customers
POST/v1/customersCreate customer
GET/v1/customers/{id}Retrieve customer
GET/v1/subscriptionsList subscriptions
POST/v1/subscriptionsCreate subscription
POST/v1/subscriptions/{id}/cancelCancel subscription
GET/v1/invoicesList invoices
POST/v1/invoices/{id}/sendSend invoice email
GET/v1/ordersList orders
POST/v1/orders/{id}/acceptAccept order for fulfilment
POST/v1/webhooksCreate webhook endpoint

Example response

{
  "id": "cus_8FvJq",
  "name": "Acme Studios",
  "email": "ops@acme.co",
  "subscriptions": 3,
  "balance": 0,
  "created_at": "2026-02-14T10:31:00Z"
}