API Base URL
Authentication
Header:X-API-Key: tb-xxxx-xxx-xxxx
Example:
All Endpoints
Product APIs
Order APIs
Product Fields
Required Fields
Optional Fields
Order Status Values
HTTP Status Codes
Common Error Responses
Authentication Errors (401)
Validation Errors (400)
Resource Errors (403, 404)
Rate Limit Error (429)
Custom Questions Format
text- Customer provides text answerimage- Customer uploads image file
Webhook Payload
Event:order.createdMethod: POST
Content-Type: application/json
Always Present Fields
Nullable Fields
order_details.variation- null if not applicableorder_details.size- null if not applicableorder_details.color- null if not applicableorder_details.special_instructions- null if noneorder_details.custom_questions- empty array if none
Request Examples
Create Product (Minimal)
Create Product (Full)
Edit Product
Delete Product
Get Order Details
Update Order Status
Product Deletion Rules
✅ CAN Delete
- Products with no orders
- Products with only completed orders
- Products with only cancelled orders
- Products with mix of completed/cancelled orders
❌ CANNOT Delete
- Products with started orders
- Products with processing orders
- Products with dispatched orders
is_active: false to hide products instead of deleting.
Tracking URL Examples
Supported Couriers
Webhook Requirements
Your Endpoint Must:
- Accept POST requests with JSON body
- Return 2xx status (200, 201, 202)
- Respond within 5 seconds
- Use HTTPS (HTTP not accepted)
- Have valid SSL certificate
Webhook Response
Rate Limit Headers
Every response includes:Data Formats
Typical Order Timeline
Best Practices Summary
✅ Do’s
- Store API keys in environment variables
- Use webhooks instead of polling
- Implement exponential backoff for retries
- Validate data before sending
- Handle all error codes properly
- Monitor rate limit headers
- Use HTTPS for webhooks
- Return 200 quickly from webhooks
- Log all webhook payloads
- Check for duplicate webhooks
❌ Don’ts
- Hardcode API keys in code
- Commit API keys to Git
- Expose API keys in client-side code
- Poll for new orders repeatedly
- Skip statuses in order flow
- Forget tracking URL for dispatched orders
- Update delivered/cancelled orders
- Delete products with active orders
- Process webhooks synchronously
- Ignore rate limit errors
Security Checklist
- API key stored in environment variable
- API key never committed to version control
- API key never exposed in client-side code
- All API requests use HTTPS
- Webhook endpoint uses HTTPS
- Valid SSL certificate on webhook endpoint
- Webhook payload validation implemented
- Error handling doesn’t expose API key
- Rate limiting respected
- Failed requests have retry logic
Support
Dashboard: https://tribemade.in/dashboardAPI Base:
https://api.tribemade.inDocumentation: This site
Version
API Version: v1Last Updated: November 2024
Full API Overview
Complete API capabilities
Authentication
API key setup guide
Rate Limits
Detailed rate information
Error Handling
Complete error reference
Products
Product APIs
Orders
Order APIs

