Base URL
All Partner API requests use the following base URL:Authentication
Include your API key in thex-contro-api-key header:
| Environment | Key prefix | Base URL |
|---|---|---|
| Sandbox | sk_test_* | https://api.contro.me/v1 |
| Production | sk_live_* | https://api.contro.me/v1 |
Request format
- All request bodies must be JSON with
Content-Type: application/json - Path parameters are denoted by
{id}in endpoint paths - Query parameters are used for filtering and pagination
Response format
Successful responses return the requested resource or a success indicator:Pagination
List endpoints support cursor-based pagination with two query parameters:| Parameter | Type | Default | Description |
|---|---|---|---|
cursor | string | — | Cursor from a previous response’s nextCursor |
limit | integer | 20 | Items per page (1–100) |
nextCursor value from the previous response as the cursor parameter. When hasMore is false, you have reached the end.
Rate limiting
The Partner API allows 1,000 requests per minute per API key. When exceeded:- Response status:
429 Too Many Requests - The
Retry-Afterheader indicates seconds to wait before retrying
Errors
All errors return a consistent format:| Status | Meaning |
|---|---|
| 400 | Bad request — invalid parameters |
| 401 | Unauthorized — missing or invalid API key |
| 404 | Not found — resource does not exist |
| 429 | Rate limited — too many requests |
| 500 | Internal server error |
Resources
Authentication
API key setup and security best practices
Quickstart
Issue your first card in 5 steps
Webhooks
Real-time event notifications
Errors
Error codes and troubleshooting