Website support APIs · Not product-data APIs

Support workflows need explicit boundaries too.

Explore the website APIs for private tickets and professional services. Access depends on enabled services and account permissions. Check the session and prerequisites before calling an endpoint.

Calling rules

Base path
/api/ecosystem/v1
Session
Private requests use a verified existing-account server session; the browser holds only this site’s HttpOnly cookie.
Browser writes
Require a same-origin Origin and X-CSRF-Token
Preconditions
If-Match: "version" · missing: 428 · stale: 412
Idempotency
Idempotency-Key · only a retry with the same identity, path, body and precondition reuses the result; conflicting content returns 409. Authorization is rechecked before replay; never retry payments or sensitive confirmations automatically.
Amounts
Integer strings in minor currency units.
Errors
Structured codes and requestId only; never internal logs, private keys or customer records.
Method and pathIdentityPreconditions
GET /api/ecosystem/v1/sessionVerified session
POST /api/ecosystem/v1/session/exchangePublic or one-time flow
POST /api/ecosystem/v1/session/logoutVerified sessionIdempotency-Key
GET /api/ecosystem/v1/documentsPublic or one-time flow
POST /api/ecosystem/v1/document-feedbackPublic or one-time flow
GET /api/ecosystem/v1/community/searchPublic or one-time flow
GET /api/ecosystem/v1/servicesPublic or one-time flow
POST /api/ecosystem/v1/casesVerified sessionIdempotency-Key
GET /api/ecosystem/v1/casesVerified session
GET /api/ecosystem/v1/cases/{caseId}Verified session
PATCH /api/ecosystem/v1/cases/{caseId}Verified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/cases/{caseId}/submitVerified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/cases/{caseId}/commandsVerified sessionIf-Match · Idempotency-Key
GET /api/ecosystem/v1/cases/{caseId}/messagesVerified session
POST /api/ecosystem/v1/cases/{caseId}/messagesVerified sessionIdempotency-Key
POST /api/ecosystem/v1/cases/{caseId}/participantsVerified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/cases/{caseId}/participants/{participantId}/acceptVerified sessionIf-Match · Idempotency-Key
DELETE /api/ecosystem/v1/cases/{caseId}/participants/{participantId}Verified sessionIf-Match · Idempotency-Key
GET /api/ecosystem/v1/cases/{caseId}/participants/{participantId}Verified session
POST /api/ecosystem/v1/cases/{caseId}/uploadsVerified sessionIdempotency-Key
POST /api/ecosystem/v1/attachments/{attachmentId}/completeVerified sessionIf-Match · Idempotency-Key
GET /api/ecosystem/v1/attachments/{attachmentId}Verified session
GET /api/ecosystem/v1/attachments/{attachmentId}/contentVerified session
POST /api/ecosystem/v1/security-reportsPublic or one-time flow
GET /api/ecosystem/v1/notificationsVerified session
POST /api/ecosystem/v1/notifications/{notificationId}/readVerified sessionIdempotency-Key
GET /api/ecosystem/v1/quotes/{quoteId}Verified session
POST /api/ecosystem/v1/quotes/{quoteId}/acceptVerified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/quotes/{quoteId}/declineVerified sessionIf-Match · Idempotency-Key
GET /api/ecosystem/v1/service-orders/{orderId}Verified session
POST /api/ecosystem/v1/service-orders/{orderId}/checkoutVerified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/service-orders/{orderId}/refund-requestsVerified sessionIf-Match · Idempotency-Key
GET /api/ecosystem/v1/deliveries/{deliveryId}Verified session
POST /api/ecosystem/v1/deliveries/{deliveryId}/acceptVerified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/deliveries/{deliveryId}/change-requestsVerified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/cases/{caseId}/partner-grantsVerified sessionIf-Match · Idempotency-Key
DELETE /api/ecosystem/v1/cases/{caseId}/partner-grants/{grantId}Verified sessionIf-Match · Idempotency-Key
POST /api/ecosystem/v1/service-orders/{orderId}/cancelVerified sessionIf-Match · Idempotency-Key

Need product APIs or MCP?

For product queries, business actions and MCP integration, see the developer documentation and follow the target product version, tool schemas and account permissions.

Back to developer center