Every endpoint of both APIs - 348 operations - rendered from the OpenAPI documents the services themselves emit.

There are two APIs and they are not the same thing. The buyer API is what a widget, a cart or your own front end talks to: it is public, it is rate-limited hard, and it never returns a rate, a cost or a margin. The merchant API is what your shop talks to: configurations, the inbox, customers, widgets, billing. A buyer never touches it.

Both documents are OpenAPI 3.1 and you can download them: buyer · merchant. A router test in each service fails the build if a route exists without a document entry, so what is below is the whole surface, not a curated subset.

Quotometry buyer API v0.1.4

Instant quoting for manufacturing shops: upload → analyse → price → quote → order. Errors are RFC 9457 problem+json with stable codes (docs/agent-docs/api/errors.md). Rate limits per spec §6.9.

Base URL https://api.quotometry.example

Authentication	How it is sent
`secretKey`	Secret API key (sk_…), scoped
`widgetKey`	Publishable widget key; the Origin header must be on the widget's allow-list

hosted

get /v1/hosted/quotes/{token} A sent quote, as the buyer sees it

No authentication.

Status	Meaning	Body
`200`	OK	`HostedQuote`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

post /v1/hosted/quotes/{token}/accept Accept a sent quote and order at the quoted price

No authentication. Request body: Accept.

Status	Meaning	Body
`200`	OK	`HostedAccepted`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

get /v1/hosted/quotes/{token}/pdf The sent quote as a PDF

No authentication.

Status	Meaning	Body
`200`	OK	`Pdf`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

models

get /v1/models/{id} Model status and parts

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`ModelView`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

get /v1/models/{id}/events Analysis progress as server-sent events

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`EventStream`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

get /v1/models/{id}/preview The model's preview mesh (binary glTF), or one body's with `?part=`, for a browser that cannot reach `preview_url`

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`Glb`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

get /v1/models/{id}/thumbnail The model's thumbnail (PNG), or one body's with `?part=`, for a browser that cannot reach `thumbnail_url`

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`Png`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

post /v1/uploads Presign an upload and create the model

Authenticate with widgetKey or secretKey. Request body: CreateUpload.

Status	Meaning	Body
`200`	OK	`UploadCreated`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

post /v1/uploads/{id}/complete Mark an upload complete and queue the analysis

Authenticate with widgetKey or secretKey. Request body: CompleteUpload.

Status	Meaning	Body
`200`	OK	`ModelQueued`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

put /v1/uploads/{id}/content Relay a small file's bytes through the API, for a browser that cannot reach the upload URL

Authenticate with widgetKey or secretKey. Request body: Bytes.

Status	Meaning	Body
`204`	Stored	-
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

post /v1/uploads/{id}/parts Parts still to upload, for resuming an interrupted multipart upload

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`UploadCreated`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

put /v1/uploads/{id}/parts/{number} Relay one part of a multipart upload through the API, for a browser that cannot reach the part URL

Authenticate with widgetKey or secretKey. Request body: Bytes.

Status	Meaning	Body
`204`	Stored	-
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

orders

post /v1/orders Place an order from a quote (idempotent with Idempotency-Key)

Authenticate with widgetKey or secretKey. Request body: OrderBody.

Status	Meaning	Body
`200`	OK	`OrderView`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

pricing

post /v1/price Price line items (coupon, customer token, e-mail claim honoured)

Authenticate with widgetKey or secretKey. Request body: PriceBody.

Status	Meaning	Body
`200`	OK	`PriceView`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

quotes

post /v1/quotes Save a quote

Authenticate with widgetKey or secretKey. Request body: PriceBody.

Status	Meaning	Body
`200`	OK	`QuoteView`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

get /v1/quotes/{id} Read a saved quote

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`QuoteView`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

post /v1/quotes/{id}/share Give the buyer a link back to their own quote

Authenticate with widgetKey or secretKey. Request body: ShareBody.

Status	Meaning	Body
`200`	OK	`ShareView`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

post /v1/rfqs Request a manual quote

Authenticate with widgetKey or secretKey. Request body: RfqBody.

Status	Meaning	Body
`200`	OK	`RfqCreated`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

get /v1/widgets/{key}/bootstrap Widget bootstrap: configurations, options, limits, theme, checkout mode

Authenticate with widgetKey or secretKey.

Status	Meaning	Body
`200`	OK	`Bootstrap`
`429`	Rate limited (Retry-After)	`Problem`
`4XX`	Problem	`Problem`

Quotometry merchant API v0.1.4

Control plane for merchants (session cookie + X-Quotometry-Tenant) and platform staff (/staff). Bodies and responses are typed in @quotometry/control-client; errors are RFC 9457 problem+json (docs/agent-docs/api/errors.md).

Base URL https://api.quotometry.example

Authentication	How it is sent
`session`	Sent in the quotometry_session cookie
`staffSession`	Sent in the quotometry_staff cookie