> ## Documentation Index > Fetch the complete documentation index at: https://docs.moonup.gg/llms.txt > Use this file to discover all available pages before exploring further. # Create a game account listing > The listing goes to moderation as it is created — there is no draft to submit afterwards. ## OpenAPI ````yaml /openapi.yaml post /v1/offers/accounts openapi: 3.1.0 info: title: MoonUP Seller API version: 1.0.0 summary: List and manage your offers from your own tools. description: | Everything a seller's bot needs to keep a catalogue of listings up to date: create a listing, restock it, pause it, archive it. Each category has its own paths — `/v1/offers/accounts`, `/v1/offers/currency` and so on — with its own fields. You integrate with the categories you sell in, and a category added to the platform later leaves yours untouched. This is the public surface. The cabinet's own screens — payouts, disputes, account settings — are not part of it and an API key does not reach them. ## Authentication Create a key in the cabinet under **Seller → API keys**. It is shown once. Send it on every request: ``` Authorization: Bearer moonup_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ``` There is nothing to exchange it for — no short-lived token sits in between. HTTPS only. Keep the key in an environment variable or your CI's secret store, never in a repository. A key may be pinned to a list of addresses when you create it (up to 16 addresses or subnets). An empty list means any address. ## Creating a listing Categories do not sell the same thing, so they do not ask for the same fields, and each one's create call takes only its own. An accounts listing has a price and a picture; a currency listing has a product, a price per unit and a stock, and no picture at all; a gift card is a code, so it has no manual handover time to promise. What every category does share is `attributes` — its own field list, which varies by game and is versioned. That one you read at runtime: GET /v1/offers/games/{game}/categories/{category_slug}/schema A full pass looks like this: 1. `GET /v1/offers/games` — pick a game, keep its `slug`. 2. `GET /v1/offers/games/{game}/categories` — pick a category. 3. `GET /v1/offers/games/{game}/categories/{category_slug}/schema` — read `attributes`. 4. `POST /v1/offers/images/upload-url`, then PUT the bytes to the URL it returns. Repeat per picture, collect the public URLs. Skip it for a category with no gallery. 5. `POST /v1/offers/{category}` — the listing goes straight to moderation. ## Statuses A new listing is `pending_moderation`. Moderation makes it `active`, or `rejected` with a `rejection_reason_code` and a note. Editing a rejected listing is how you resubmit it — there is no separate call. Editing an `active` one sends it back to moderation too, unless all you changed was the price or the stock. `paused` is yours, through pause and unpause. `archived` is the end of the line: `DELETE` retires a listing for good and keeps it readable to you. `reserved` and `sold` follow orders, not calls. ## Rate limits | | Budget | |---|---| | Reads | 500 requests per minute | | Writes | 250 requests per minute | | Writes to one offer | 5 per minute and 10 per hour | Going over answers `429`. It is temporary: wait and retry, the key stays valid. Up to 5 keys per account — create the second one ahead of time so you can rotate without downtime. ## Errors Every failure answers with the same body, a stable snake_case code: ```json { "error": "delivery_instructions_required" } ``` Branch on `error`, not on the message — there is no message. servers: - url: https://api.moonup.gg description: Production security: - api_key: [] tags: - name: Catalog description: | What can be listed, and what each category's fields are. Public: these read without a key, so you can explore before you have one. - name: Accounts description: Game accounts, sold whole — one price, one picture. - name: Items description: In-game items, sold whole. - name: Boosting description: Boosting services, sold whole. - name: Top-ups description: Top-up packs, handed over by one of the platform's delivery methods. - name: Gift cards description: Fixed-denomination codes, handed over instantly. - name: Currency description: In-game currency, priced per unit out of a stock you keep. - name: Pictures description: Where an offer's images come from. paths: /v1/offers/accounts: post: tags: - Accounts summary: Create a game account listing description: | The listing goes to moderation as it is created — there is no draft to submit afterwards. operationId: createFixedPriceOffer_accounts requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/FixedPriceCreate' responses: '201': description: Created content: application/json: schema: $ref: '#/components/schemas/FixedPriceOffer' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '429': $ref: '#/components/responses/RateLimited' components: schemas: FixedPriceCreate: type: object required: - game - title - price - delivery_type properties: game: type: string description: The game's slug. title: type: string minLength: 8 maxLength: 128 description: type: string maxLength: 4096 price: type: integer format: int64 description: >- US cents — `4990` is $49.90. USD is the only currency the platform prices in. images: type: array minItems: 1 maxItems: 10 items: type: string format: uri description: | `image_url`s minted by `POST /v1/offers/images/upload-url`. At least one: it is the cover the marketplace renders. A URL from anywhere else is refused (`invalid_image`). tags: type: array items: type: string attributes: type: object description: The category's own fields — read them from its schema. additionalProperties: true delivery_type: type: string enum: - instant - manual units: type: array description: | `delivery_type: instant` only — one opaque JSON payload per unit, the goods themselves. Encrypted at rest; never read back. items: type: object manual_delivery_value: type: integer format: int32 description: '`delivery_type: manual` only — the handover time you promise.' manual_delivery_unit: type: string enum: - minutes - hours - days FixedPriceOffer: allOf: - $ref: '#/components/schemas/OfferBase' - $ref: '#/components/schemas/Delivery' - type: object properties: price: type: integer format: int64 currency: type: string examples: - USD images: type: array items: type: string format: uri delivery_type: type: string enum: - instant - manual OfferBase: type: object description: What every category's listing carries, whatever it sells. properties: id: type: string format: uuid title: type: string description: type: string attributes: type: object description: The category's own fields, keyed by the schema's `key`. additionalProperties: true tags: type: array items: type: string status: type: string description: | `pending_moderation` on create, then `active` or `rejected`. `paused` and `archived` are yours, through pause and `DELETE`. `reserved` and `sold` follow an order. `removed` is a moderation takedown after publishing, which no call in this API performs. enum: - pending_moderation - active - paused - reserved - sold - rejected - removed - archived created_at: type: - string - 'null' format: date-time updated_at: type: - string - 'null' format: date-time published_at: type: - string - 'null' format: date-time rejection_reason_code: type: - string - 'null' description: | Why moderation refused the last version, if it ever did. It stays on the listing after you resubmit, so read it together with `status`. enum: - prohibited_item - misleading_description - stolen_images - invalid_price - insufficient_details - other - null rejection_note: type: - string - 'null' Delivery: type: object description: How a listing sold by hand promises to hand over. properties: manual_delivery_value: type: - integer - 'null' format: int32 manual_delivery_unit: type: - string - 'null' enum: - minutes - hours - days - null Error: type: object description: The one failure shape this API answers with. properties: error: type: string description: A stable snake_case code. Branch on this. examples: - delivery_instructions_required required: - error responses: BadRequest: description: | The body or a parameter is wrong. `error` names which rule — e.g. `delivery_instructions_required`, `bulk_fields_required`, `instant_requires_activation_code`, `title_too_short`, `invalid_attributes`, `invalid_image`. content: application/json: schema: $ref: '#/components/schemas/Error' examples: missing_field: value: error: delivery_instructions_required Unauthorized: description: | The key is unknown, revoked, or the request came from an address outside the key's list. Which check failed is not disclosed. content: application/json: schema: $ref: '#/components/schemas/Error' examples: unauthorized: value: error: unauthorized Forbidden: description: | The key is valid but the account may not do this — it lacks the permission, or it is suspended (`account_suspended`). content: application/json: schema: $ref: '#/components/schemas/Error' RateLimited: description: One of the budgets is spent. Wait and retry; the key stays valid. content: application/json: schema: $ref: '#/components/schemas/Error' examples: rate_limited: value: error: rate_limited securitySchemes: api_key: type: http scheme: bearer description: Your API key, from the cabinet under **Seller → API keys**. ````