Introducing the nOfert Public API — Build Anything on Top of Our Marketplace

We have been building nOfert to be more than just a marketplace — we want it to be a platform that other platforms can build on top of. Starting today, the nOfert Public API v1 is live and available to all vendors and developers.

What Is the nOfert API?

The nOfert API is a RESTful HTTP interface that exposes our marketplace data and functionality to external applications. Whether you are building a mobile app, a custom storefront, a price comparison tool, or an automated order management system — the API gives you the power to do it.

Every response is clean JSON. Authentication is simple Bearer token. Documentation is thorough and always up to date at /api/docs.

What You Can Do With the API

📦 Products & Catalog

Fetch our full product catalog with powerful filtering — search by keyword, filter by category, price range, stock status, and featured flag. Sort by newest, price, or popularity. Paginate up to 100 results per page.

Need specific products? Use bulk lookup by passing a comma-separated list of IDs: ?ids=42,87,103 — up to 100 products in a single request.

⭐ Product Reviews

Pull customer reviews for any product — with overall average rating, star-by-star breakdown, and sort options (newest, highest rated, most helpful). Perfect for embedding social proof on external storefronts.

🏪 Vendors & Categories

Browse all approved vendors and their shop profiles. Explore our category tree with product counts at every level. Ideal for building navigation structures or directory pages.

🛒 Orders

Create orders programmatically and redirect your customers to nOfert's secure checkout — no need to handle payment processing yourself. Then poll the order status endpoint to track fulfillment in real time.

👤 User Authentication

Users can log in via the API and receive a secure token. With that token, they can retrieve their own profile and full order history — giving you everything you need to build a personalised customer-facing app.

⚡ Real-Time Webhooks

This is the feature we are most excited about. Webhooks let nOfert push events to your server the moment something important happens — no polling required.

Register your HTTPS endpoint URL in your vendor dashboard, choose which events to subscribe to, and we will send a signed HTTP POST to your server within seconds of each event:

• order.created — A new order has been placed through the API
• order.paid — Payment has been confirmed (Stripe, PayPal, etc.)
• order.shipped — The vendor has marked the order as shipped with tracking info
• order.delivered — The order has been marked as delivered

Every webhook payload is signed with HMAC-SHA256 using your unique webhook secret. Verify the X-Nofert-Signature header on your server to guarantee the request came from us — not anyone else.

Your webhook dashboard gives you a full delivery log with response codes, response bodies, and timestamps. A built-in Test button lets you send a sample payload to your endpoint instantly before going live.

🔑 API Keys & Rate Limits

Generate up to 10 API keys from your vendor dashboard — each with a custom name and optional expiry date. Keys can be enabled or disabled at any time without deletion.

Each key has a rate limit of 1,000 requests per hour by default. Every authenticated response now includes three standard headers so your application can manage usage proactively:

• X-RateLimit-Limit — your total hourly allowance
• X-RateLimit-Remaining — requests remaining in the current window
• X-RateLimit-Reset — Unix timestamp when your limit resets

Public endpoints (product listing, categories, vendors) require no key at all — they are open at 120 requests per minute per IP.

Your API key dashboard now also shows a 7-day usage sparkline so you can see exactly how much traffic each key is generating at a glance.

📖 Documentation & OpenAPI Spec

All endpoints are documented at nofert.net/api/docs — with parameter tables, curl examples, and response descriptions for every route.

For developers who prefer machine-readable specs, we also publish a full OpenAPI 3.0 specification at /api/docs.json. Import it directly into Postman, Insomnia, Swagger UI, or any API client that supports OpenAPI to start exploring in seconds.

🚀 How to Get Started

1. Sign in to your vendor account at nOfert
2. Go to Vendor Dashboard → API Keys
3. Click Create Key, give it a name, and copy your key
4. Make your first request:
   curl -H "Authorization: Bearer YOUR_KEY" https://nofert.net/api/v1/me
5. Read the full documentation at /api/docs

To set up webhooks, navigate to Vendor Dashboard → Webhooks, register your endpoint URL, select the events you want, and click Register. Use the Test button to send a sample payload immediately.

What's Next

The API v1 launch is just the beginning. We are already planning additional endpoints, higher rate limit tiers for high-volume integrations, and more webhook event types as we expand the platform.

If you build something on top of the nOfert API, we would love to hear about it. Reach out through the contact page or message us directly — we are proud to support every developer building on our platform.

Ready to build? Your API key is one click away at Vendor → API Keys. Full documentation lives at /api/docs.