Growmax ARC Service API
Server-to-server REST API for a Growmax ARC workspace: read the catalogue, customers, quotes and orders, create quotes and sales orders, and run bulk product imports.
Authentication. Send a workspace API key as Authorization: Bearer gm_live_.... Create keys in the workspace's API key settings. A READ_ONLY key can call every read route; creating or changing anything needs a READ_WRITE key.
Permissions. A key acts as the user who created it: each read route needs that user's current read permission (named in x-required-permission), and deactivating the user disables the key. The workspace's plan must include API access.
Paging. The product, customer, sales order and sales quote lists take limit and cursor and return page.nextCursor. To keep a copy in sync, store the newest updatedAt you have seen and pass it as updatedAfter next time. On the product and customer lists, rows removed since then come back with deleted: true; the order and quote lists do not report removals.
Money. Amounts are plain numbers next to an ISO 4217 currency code. They are never formatted.
Rate limits. Every key has a requests-per-minute limit, reported in the X-ApiKey-RateLimit-* response headers. Over it, you get 429 with Retry-After.
Retries. Creates accept an Idempotency-Key header, so a retried request never creates a second document.
Authentication
- HTTP: Bearer Auth
Tenant API key, gm_live_.... Send it as Authorization: Bearer <key>.
Security Scheme Type: | http |
|---|---|
HTTP Authorization Scheme: | bearer |
Bearer format: | gm_live_… |