delivery

The sealed basket behind a handoff link

Public and unauthenticated: the caller is a shopper's browser following a link out of a chat window, with no API key and no reason to get one. The response is the basket encrypted with AES-256-GCM, and this service cannot decrypt it: the key lives only in the link's fragment, which never reaches a server. Reading a row without that fragment gains nothing.

get/v1/handoffs/{id}

Request

  • Base URL: https://supermcp.co.il
  • URL: https://supermcp.co.il/v1/handoffs/{id}
  • Auth: none required

Path parameters

idstring required

16 base64url characters, derived from the link's secret rather than chosen. Anything else is rejected on shape.

Response

OK

Changes

No recorded changes to this operation across all 1 revision of this API.