Service API guide

Review the current customer-facing endpoints, authentication boundary, idempotency requirements, error shape, and examples before connecting a verified account to the service system.

Authentication boundary

Customer writes require a valid bearer session. Privileged operator operations are not documented here.

Customer endpoints

GET/api/services

List the verified customer catalogue

POST/api/orders

Create a review order with an idempotency key

POST/api/topups

Record a verified payment reference

Safe errors

{
  "error": "request_invalid"
}