> ## Documentation Index > Fetch the complete documentation index at: https://docs.moonup.gg/llms.txt > Use this file to discover all available pages before exploring further. # Create an offer > Creates the listing as a `draft`. Read the category's schema first — `requirements` names the fields this body must carry for it. Nothing is on sale until `POST /v1/offers/{id}/submit`. ## OpenAPI ````yaml /openapi.yaml post /v1/offers openapi: 3.1.0 info: title: MoonUP Seller API version: 1.0.0 summary: List and manage your offers from your own tools. description: | Everything a seller's bot needs to keep a catalogue of listings up to date: read what a category expects, create a listing, restock it, pause it, archive it. This is the public surface. The cabinet's own screens — payouts, disputes, account settings — are not part of it and an API key does not reach them. ## Authentication Create a key in the cabinet under **Seller → API keys**. It is shown once. Send it on every request: ``` Authorization: Bearer moonup_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ``` There is nothing to exchange it for — no short-lived token sits in between. HTTPS only. Keep the key in an environment variable or your CI's secret store, never in a repository. A key may be pinned to a list of addresses when you create it (up to 16 addresses or subnets). An empty list means any address. ## Creating a listing Categories do not ask for the same things. An accounts listing needs a picture and a price; a currency listing needs a product and a stock; a gift-card listing may only be delivered instantly, with an activation code. Rather than describing that in prose that would go stale, every category answers for itself: GET /v1/offers/games/{game}/categories/{category_slug}/schema `attributes[]` is the category's own field list, and `requirements` is what the body of `POST /v1/offers` must carry for it. Both come from the code that validates the create call, so what you are told is what you are held to. A full pass looks like this: 1. `GET /v1/offers/games` — pick a game, keep its `slug`. 2. `GET /v1/offers/games/{game}/categories` — pick a category. 3. `GET /v1/offers/games/{game}/categories/{category_slug}/schema` — read `requirements` and `attributes`. 4. `POST /v1/offers/images/upload-url`, then PUT the bytes to the URL it returns. Repeat per picture, collect the public URLs. 5. `POST /v1/offers` — the listing is created as a `draft`. 6. `POST /v1/offers/{id}/submit` — it goes to moderation, then active. ## Rate limits | | Budget | |---|---| | Reads | 500 requests per minute | | Writes | 250 requests per minute | | Writes to one offer | 5 per minute and 10 per hour | Going over answers `429`. It is temporary: wait and retry, the key stays valid. Up to 5 keys per account — create the second one ahead of time so you can rotate without downtime. ## Errors Every failure answers with the same body, a stable snake_case code: ```json { "error": "seller_instructions_required" } ``` Branch on `error`, not on the message — there is no message. servers: - url: https://api.moonup.gg description: Production security: - api_key: [] tags: - name: Catalog description: | What can be listed, and what each category asks for. Public: these read without a key, so you can explore before you have one. - name: Offers description: Your own listings — create, edit, restock, pause, archive. paths: /v1/offers: post: tags: - Offers summary: Create an offer description: | Creates the listing as a `draft`. Read the category's schema first — `requirements` names the fields this body must carry for it. Nothing is on sale until `POST /v1/offers/{id}/submit`. requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/CreateOffer' examples: accounts_instant: summary: An accounts listing delivered instantly from a pool of two value: game: roblox category: accounts title: Roblox account, 40k Robux, age verified description: Original email included. price: 4990 delivery_type: instant images: - https://cdn.moonup.gg/offers/2f9c.jpg attributes: more_played_game: Blox Fruits robux_balance: 40000 age_verified: true units: - login: a@example.com password: ... - login: b@example.com password: ... currency_bulk: summary: A currency listing priced per unit out of a stock value: game: hypixel category: currency title: Hypixel Skyblock Coins, instant trade product_slug: hypixel-skyblock-coins delivery_type: manual delivery_method: ingame_trade seller_instructions: Tell me your IGN, meet me at the Bazaar. manual_delivery_value: 20 manual_delivery_unit: minutes price_per_unit: 4200 stock_quantity: 1000000 min_order_quantity: 15000000 responses: '201': description: Created content: application/json: schema: $ref: '#/components/schemas/Offer' '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '429': $ref: '#/components/responses/RateLimited' components: schemas: CreateOffer: type: object description: | Which of these are required depends on the category — read `requirements` from its schema. The rest are optional everywhere. properties: game: type: string description: The game's slug. category: type: string description: The category's slug. title: type: string minLength: 8 maxLength: 128 description: type: string maxLength: 4096 price: type: integer format: int64 description: | Minor units of the platform currency. Ignored for a bulk (per-unit) listing, which prices off `price_per_unit` instead. currency: type: string description: The platform currency, or omitted. Anything else is refused. attributes: type: object description: The category's own fields, keyed by the schema's `key`. additionalProperties: true images: type: array items: type: string format: uri description: >- URLs minted by `POST /v1/offers/images/upload-url`. Nothing else is accepted. tags: type: array items: type: string delivery_type: type: string enum: - instant - manual delivery_method: type: string description: A key from `GET /v1/offers/delivery-methods`. seller_instructions: type: string maxLength: 2048 description: What the buyer is told about the handoff, in your words. units: type: array description: | Instant delivery only — one opaque JSON payload per unit, the goods themselves. Encrypted at rest; never read back by this API. items: type: object manual_delivery_value: type: integer description: Manual delivery only — the handoff time you promise. manual_delivery_unit: type: string enum: - minutes - hours - days manual_delivery_instructions: type: string maxLength: 2048 product_slug: type: string description: Bulk listings only — from `.../products`. price_per_unit: type: integer format: int64 description: Bulk listings only. Per one of the product's `scale`, not per coin. stock_quantity: type: integer format: int64 description: Bulk listings only. min_order_quantity: type: integer format: int64 description: Bulk listings only — the smallest order you will take. Offer: type: object description: Your own listing, as the write calls answer with it. properties: id: type: string format: uuid seller_id: type: string format: uuid title: type: string description: type: string price: type: integer format: int64 currency: type: string attributes: type: object additionalProperties: true images: type: array items: type: string format: uri tags: type: array items: type: string delivery_type: type: string enum: - instant - manual manual_delivery_value: type: - integer - 'null' manual_delivery_unit: type: - string - 'null' manual_delivery_instructions: type: - string - 'null' status: type: string enum: - draft - pending_moderation - active - paused - reserved - sold - rejected - removed - archived created_at: type: - string - 'null' format: date-time updated_at: type: - string - 'null' format: date-time published_at: type: - string - 'null' format: date-time rejection_reason_code: type: - string - 'null' description: Why moderation refused it, when it did. rejection_note: type: - string - 'null' seller_instructions: type: string delivery_method: type: - string - 'null' price_per_unit: type: - integer - 'null' format: int64 stock_quantity: type: - integer - 'null' format: int64 min_order_quantity: type: - integer - 'null' format: int64 product_id: type: - string - 'null' format: uuid Error: type: object description: The one failure shape this API answers with. properties: error: type: string description: A stable snake_case code. Branch on this. examples: - seller_instructions_required required: - error responses: BadRequest: description: | The body or a parameter is wrong. `error` names which rule — e.g. `seller_instructions_required`, `bulk_fields_required`, `instant_requires_activation_code`, `title_too_short`, `invalid_attributes`, `invalid_image`. content: application/json: schema: $ref: '#/components/schemas/Error' examples: missing_field: value: error: seller_instructions_required Unauthorized: description: | The key is unknown, revoked, or the request came from an address outside the key's list. Which check failed is not disclosed. content: application/json: schema: $ref: '#/components/schemas/Error' examples: unauthorized: value: error: unauthorized Forbidden: description: | The key is valid but the account may not do this — it lacks the permission, or it is suspended (`account_suspended`). content: application/json: schema: $ref: '#/components/schemas/Error' RateLimited: description: One of the budgets is spent. Wait and retry; the key stays valid. content: application/json: schema: $ref: '#/components/schemas/Error' examples: rate_limited: value: error: rate_limited securitySchemes: api_key: type: http scheme: bearer description: Your API key, from the cabinet under **Seller → API keys**. ````