Getting Started

Contact your GlamBug point of contact to get set up as a partner. Once your account is created, you'll be issued API keys directly — there's no self-service signup.

Live and test keys

You'll get two kinds of key. Both authenticate the same way and see the exact same live catalogue — the difference is only in what happens when you submit an order.

Key type	Prefix	Order submission
Live	`gb_live_…`	Creates a real order, reviewed and fulfilled normally.
Test	`gb_test_…`	Creates an order flagged internally — never enters fulfillment.

Use a test key while you're building your integration, and switch to your live key only when you're ready to send real orders.

Authenticating a request

Send your key in an X-Api-Keyheader on every request. There's no separate login step or token exchange.

Request

curl https://api.gemzy.in/graphql \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: gb_live_your_key_here" \
  -d '{"query": "{ partnerCategories { id name } }"}'

A request with a missing or invalid key gets an authentication error, not a 4xx HTTP status — GraphQL always responds 200 and puts errors in the response body:

Response

{
  "errors": [
    {
      "message": "Not authenticated",
      "extensions": { "code": "UNAUTHENTICATED" }
    }
  ],
  "data": null
}

Keeping your key safe

Never put your key in client-side/browser code — call our API from your own backend.
We only ever show a key's full value once, at creation. If you lose it, ask us to revoke it and issue a new one.
If a key is ever exposed, tell us immediately so we can revoke it.

Next step

Fetch our catalogue — start with Categories.