Base URL & environments

There is one API host. Every request goes to https://api.morffeus.com/api/v2 followed by the endpoint's path, over HTTPS, with JSON in and out.

Base URL#

curl -X PUT "https://api.morffeus.com/api/v2/int/stocks" \
  -H "Authorization: Bearer $MORFFEUS_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{ "stocks": [ … ] }'

Requests#

• HTTPS. Your token travels in a header, so never send a request over plain HTTP.
• JSON bodies. Send every body as JSON with Content-Type: application/json. Without that header the body is not read, and the call fails as if you had sent no body.
• Accept. Leave the header out or send application/json. A value that rules out JSON answers 406.
• Names. Query parameters are mostly camelCase, such as warehouseId. Fields in a body are snake_case, such as warehouse_code. Each endpoint's page lists its own.

Responses#

• JSON, UTF-8. The payload is under data, errors are under errors. See Errors for the exceptions.
• Numbers. Quantities and prices are JSON numbers and can have decimals. Our ids are integers.
• Times. Timestamps are UTC in ISO 8601, written without an offset: 2026-09-30T09:41:12.
• Content-Type. Some error responses come without the header. Read the body as JSON whatever it says.

Staging#

To build and test without touching live data, ask us for a staging app at [email protected]. We arrange it with you, including where to send your requests and how to get a token for it.

Related#

• Authentication: the token every request carries.
• Your first request: the base URL in use.
• Errors: status codes and error bodies.