# Hidden

> Hidden is a platform for selling digital goods. These are the developer docs: REST API v1 (public and authenticated), signed webhooks, dynamic delivery and the Buy button. Every page is also Markdown: add .md to its URL.

Base URL https://api.sellhidden.com/v1. Public endpoints need no key. Authenticated endpoints take `Authorization: Bearer <key>` with scopes such as products:read. Responses are JSON. Money is USD. Lists use `limit` and `cursor`. POST routes accept `Idempotency-Key`. There is no test mode: every call is live. A temporary read-only key can be made from the Try it panel.

## Start here
- [Start here](https://docs.sellhidden.com/start.md): Your first call in five minutes, keys and scopes, responses, rate limits, pagination, idempotency, OpenAPI.
- [Build with AI](https://docs.sellhidden.com/ai.md): Ready prompts and a rules file for coding tools.

## Reference
- [Public API](https://docs.sellhidden.com/public.md): Products, categories, reviews and recent sales of one store, no key.
- [API reference](https://docs.sellhidden.com/reference.md): Every authenticated endpoint by group.
- [Products](https://docs.sellhidden.com/reference/products.md): Your catalogue as the seller sees it: hidden products included, every variation with its deliverables, key pools and order counts. Writes follow the dashboard rules: plan limits, unique slugs, deliverable checks, the 2,000,000-key cap per variation and an audit log entry.
- [Categories](https://docs.sellhidden.com/reference/categories.md): Up to 100 categories per store. Deleting one leaves its products uncategorised.
- [Coupons](https://docs.sellhidden.com/reference/coupons.md): Discount codes. The code and the discount are fixed once created (orders keep what they used); every other rule can change.
- [Orders](https://docs.sellhidden.com/reference/orders.md): Orders are created by buyers at checkout. The API reads them and runs the same actions as the dashboard: approve or reject a manual payment, cancel, redeliver, resend the receipt, refund to store balance, keep a private note. Every order has a short reference in `publicRef` (for example…
- [Subscriptions](https://docs.sellhidden.com/reference/subscriptions.md): Buyers of a variation billed per period (weekly to yearly). Renewals are fresh orders the buyer pays from the renewal email or the order page, or from their store balance; after the grace period access ends by itself. The subscription.* webhook events carry the same shape.
- [Customers](https://docs.sellhidden.com/reference/customers.md): Everyone who checked out or signed in on your storefront, with lifetime aggregates.
- [Reviews](https://docs.sellhidden.com/reference/reviews.md): Buyer reviews with unmasked emails. Reviews are never deleted: hide spam instead, or answer in public.
- [Tickets](https://docs.sellhidden.com/reference/tickets.md): Support threads buyers open from their order or account. Replies email the buyer.
- [Store](https://docs.sellhidden.com/reference/store.md): Your store as its seller sees it, and the basic settings. Themes, payment methods, payouts and domains stay in the dashboard.
- [Webhooks](https://docs.sellhidden.com/reference/webhooks.md): Manage the endpoints that receive signed events (the same ones as Developers, Webhooks). The signing secret is returned once, on create and on rotate.
- [Analytics](https://docs.sellhidden.com/reference/analytics.md): Revenue and order statistics.
- [Your key](https://docs.sellhidden.com/reference/keys.md): Any valid key can inspect itself: its store, scopes, expiry and rate-limit window.

## Webhooks and delivery
- [Webhooks](https://docs.sellhidden.com/webhooks.md): 29 signed events, headers, signature check in Node, Python and PHP, retries.
- [Dynamic delivery](https://docs.sellhidden.com/dynamic-delivery.md): Hidden calls your URL on every paid order and delivers what you return.
- [Buy button](https://docs.sellhidden.com/buy-button.md): One script tag, live price, prefill attributes, checkout events.
- [How selling works](https://docs.sellhidden.com/selling.md): Delivery types, buyer accounts and payments, subscriptions, moving, testing.

## Machine-readable
- [OpenAPI 3.1](https://docs.sellhidden.com/openapi.json)
- [Postman collection](https://docs.sellhidden.com/postman.json)
- [Everything in one file](https://docs.sellhidden.com/llms-full.txt)

## Optional
- [Plan limits](https://sellhidden.com/pricing)
- [Security](https://sellhidden.com/security)