Developer API

API documentation

Integrate Crescitaly with real REST endpoints used by dashboard, storefront, and reseller flows.

Sign In

POST /api/auth/login creates a cookie session; no session JWT is returned in JSON

Call Endpoints

Use session cookies plus CSRF for browser mutations, or X-API-Key server-side

OpenAPI Spec

Use /api-docs-json for SDK generation and tooling

Base URL

Base URLClick to copy

https://app.crescitaly.com/api

OpenAPI JSON

Spec URLClick to copy

https://app.crescitaly.com/api-docs-json

Authentication

Login sets an HttpOnly crescitaly_auth session cookie and a readable crescitaly_csrf cookie; the JSON response never exposes the session JWT. Cookie-authenticated mutations must send the CSRF value as X-CSRF-Token. Server-to-server integrations should use an API key.

Authentication headersClick to copy

Cookie: crescitaly_auth=SESSION_COOKIE
X-CSRF-Token: VALUE_FROM_crescitaly_csrf_COOKIE

# Server-to-server alternative
X-API-Key: YOUR_API_KEY

Example Request

Use an API key for a server-to-server order call. Browser sessions use the cookie and CSRF pair described above.

cURLClick to copy

curl -X POST "https://app.crescitaly.com/api/orders/api" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"serviceId":"cuid_service","link":"https://instagram.com/yourprofile","quantity":1000}'

Rate Limits & Errors

Order limits: 30/min on /orders (session or API key); 300/min on the dedicated /orders/api endpoint.
All errors return JSON with a readable `message`.
Use OpenAPI spec to generate strongly-typed SDKs and avoid integration drift.

Endpoints

GET/api/services

Get the raw array of available public services.

Parameters

Name	Type	Required	Description
category	string	-	Category filter
platform	string	-	Platform filter
status	string	-	Service status filter

Response

ResponseClick to copy

[
  {
    "id": "cuid_service",
    "name": "Instagram Followers",
    "description": "Instagram follower delivery service",
    "price": 4.99,
    "category": "Instagram Followers",
    "platform": "Instagram",
    "enabled": true,
    "min": 100,
    "max": 100000,
    "avgTime": "0-6 hours",
    "linkExample": "https://instagram.com/yourprofile"
  }
]

Ready to integrate? Choose cookie-session or API-key authentication, then inspect the full OpenAPI schema.