Skip to main content

API Base URL

Authentication

Header: X-API-Key: tb-xxxx-xxx-xxxx Example:

All Endpoints

Product APIs

Order APIs

Product Fields

Required Fields

Optional Fields

Order Status Values

HTTP Status Codes

Common Error Responses

Authentication Errors (401)

Validation Errors (400)

Resource Errors (403, 404)

Rate Limit Error (429)

Custom Questions Format

Types:
  • text - Customer provides text answer
  • image - Customer uploads image file
Example:

Webhook Payload

Event: order.created
Method: POST
Content-Type: application/json

Always Present Fields

Nullable Fields

  • order_details.variation - null if not applicable
  • order_details.size - null if not applicable
  • order_details.color - null if not applicable
  • order_details.special_instructions - null if none
  • order_details.custom_questions - empty array if none

Request Examples

Create Product (Minimal)

Create Product (Full)

Edit Product

Delete Product

Get Order Details

Update Order Status

Product Deletion Rules

✅ CAN Delete

  • Products with no orders
  • Products with only completed orders
  • Products with only cancelled orders
  • Products with mix of completed/cancelled orders

❌ CANNOT Delete

  • Products with started orders
  • Products with processing orders
  • Products with dispatched orders
Alternative: Use is_active: false to hide products instead of deleting.

Tracking URL Examples

Supported Couriers

Webhook Requirements

Your Endpoint Must:

  1. Accept POST requests with JSON body
  2. Return 2xx status (200, 201, 202)
  3. Respond within 5 seconds
  4. Use HTTPS (HTTP not accepted)
  5. Have valid SSL certificate

Webhook Response

Rate Limit Headers

Every response includes:

Data Formats

Typical Order Timeline

Best Practices Summary

✅ Do’s

  • Store API keys in environment variables
  • Use webhooks instead of polling
  • Implement exponential backoff for retries
  • Validate data before sending
  • Handle all error codes properly
  • Monitor rate limit headers
  • Use HTTPS for webhooks
  • Return 200 quickly from webhooks
  • Log all webhook payloads
  • Check for duplicate webhooks

❌ Don’ts

  • Hardcode API keys in code
  • Commit API keys to Git
  • Expose API keys in client-side code
  • Poll for new orders repeatedly
  • Skip statuses in order flow
  • Forget tracking URL for dispatched orders
  • Update delivered/cancelled orders
  • Delete products with active orders
  • Process webhooks synchronously
  • Ignore rate limit errors

Security Checklist

  • API key stored in environment variable
  • API key never committed to version control
  • API key never exposed in client-side code
  • All API requests use HTTPS
  • Webhook endpoint uses HTTPS
  • Valid SSL certificate on webhook endpoint
  • Webhook payload validation implemented
  • Error handling doesn’t expose API key
  • Rate limiting respected
  • Failed requests have retry logic

Support

Dashboard: https://tribemade.in/dashboard
API Base: https://api.tribemade.in
Documentation: This site

Version

API Version: v1
Last Updated: November 2024

Full API Overview

Complete API capabilities

Authentication

API key setup guide

Rate Limits

Detailed rate information

Error Handling

Complete error reference

Products

Product APIs

Orders

Order APIs