# AuraStack Reseller API

> Buy AuraStack products (AI and developer software subscriptions, license keys) over a REST API, paid from a prepaid euro balance. Every account can create a sandbox key (sk_sandbox_) that behaves like live and is never charged; live keys (sk_live_, older sk_aura_) are charged.

Base URL: https://aurastack.link/api/v1. Auth: Authorization: Bearer <key>. JSON in and out. Amounts are strings in euros with two decimals.

## Docs

- [Reseller API guide](https://aurastack.link/docs/api.md): quickstart, products, quotes, orders, statuses, VAT, idempotency, errors, sandbox, end-to-end tests
- [OpenAPI contract](https://aurastack.link/api/v1/openapi.json): every endpoint, field and error
- [Agent skill](https://aurastack.link/skills/aurastack-reseller/SKILL.md): the rules a coding agent must follow; read it before writing code

## Rules for agents

- Use the sandbox key (sk_sandbox_) until the user explicitly says to go live. Never create a live order on your own.
- Quote, then order with the quote's unit_price as expected_unit_price.
- Send one Idempotency-Key per customer purchase and reuse it on every retry.
- Never log, print or store delivery.items outside the shop's order store: they are the customer's credentials.
- Do not retry 400, 401, 402, 409 or 422 unchanged. Retry 500 and 503 with the same Idempotency-Key, with backoff.
- Write end-to-end tests against the sandbox: POST /sandbox/reset first, then one test per AuraStack-Sandbox-Outcome value.

## Optional

- [Interactive reference](https://aurastack.link/docs/api/reference): Swagger UI, try requests with a sandbox key
- [Sandbox outcomes](https://aurastack.link/docs/api.md#sandbox): AuraStack-Sandbox-Outcome header values