> Documentation index: https://docs.sellhidden.com/llms.txt

# Reviews

Source: https://docs.sellhidden.com/reference/reviews

Buyer reviews with unmasked emails. Reviews are never deleted: hide spam instead, or answer in public.

## Endpoints

5 endpoints · [reviews:read](https://docs.sellhidden.com/start?scope=reviews%3Aread#scopes) · [reviews:write](https://docs.sellhidden.com/start?scope=reviews%3Awrite#scopes)

Base URL https://api.sellhidden.com/v1 · Authorization: Bearer · 120/min per key · cursor pagination · Idempotency-Key on POST · No test mode

### GET /reviews — List reviews

Scope `reviews:read`.

**Query parameters**

| Query parameters | Type | Description |
| --- | --- | --- |
| `productId` | string | Only this product. |
| `rating` | 1..5 | Only this rating. |
| `visible` | true \| false | Only shown or only hidden reviews. |
| `limit` | 1..1000 | Page size. Default 50. |
| `cursor` | string | nextCursor from the previous page. |

```bash
curl https://api.sellhidden.com/v1/reviews \
  -H "Authorization: Bearer hsk_live_…"
```

### GET /reviews/{id} — Get a review

Scope `reviews:read`.

```bash
curl https://api.sellhidden.com/v1/reviews/ID \
  -H "Authorization: Bearer hsk_live_…"
```

### PATCH /reviews/{id} — Hide or show a review

Scope `reviews:write`.

**Body**

| Body | Type | Description |
| --- | --- | --- |
| `visible` (required) | boolean | false hides it from the storefront. |

```bash
curl -X PATCH https://api.sellhidden.com/v1/reviews/ID \
  -H "Authorization: Bearer hsk_live_…" \
  -H "Content-Type: application/json" \
  -d '{"visible":false}'
```

### PUT /reviews/{id}/reply — Reply in public

Writes or edits the store's reply under the review. The buyer is emailed once per review, on the first reply. Automatic ratings cannot be answered (409 review_automatic). POST works the same. Scope `reviews:write`. Accepts `Idempotency-Key`.

**Body**

| Body | Type | Description |
| --- | --- | --- |
| `reply` (required) | string | Up to 1,000 characters. |

```bash
curl -X PUT https://api.sellhidden.com/v1/reviews/ID/reply \
  -H "Authorization: Bearer hsk_live_…" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{"reply":"Thanks for the kind words!"}'
```

### DELETE /reviews/{id}/reply — Remove the reply

Scope `reviews:write`.

```bash
curl -X DELETE \
  https://api.sellhidden.com/v1/reviews/ID/reply \
  -H "Authorization: Bearer hsk_live_…"
```