Marketplace API

curl -X POST https://api.zuuppa.com/intents \
  -H 'Authorization: Bearer sk_live_...' \
  -H 'X-Zuuppa-On-Behalf-Of: <seller_id>' \
  -H 'Content-Type: application/json' \
  -d '{
        "amount_usd_cents": 10000,
        "accepted_tokens": [{ "kind": "sol" }],
        "application_fee_bps": 300,
        "customer": { "email": "buyer@example.com" },
        "reference": "mkt-order-77"
      }'

Three differences from taking your own payment:

• customer.email is required — a create without it is a 400. A seller has no login and the platform sends no email.
• The settlement splits three ways in one transaction: the seller's share to the seller's wallet, your cut to yours, the platform fee to the platform. Marketplace splitting is SOL only today.

seller_limit is null for no limit (the normal state). sellers_total counts archived sellers and sellers_count does not — any limit is charged against the total, because an archived seller keeps its derivation index (and so its deposit addresses). Archiving a seller does not buy back a slot.

Errors: 400 nothing to update; 400 fee_wallet is not a valid Solana address; 400 on an out-of-range rate; 409 if the capability is disabled.

Errors: 400 on a missing name, bad sweep_destination, or an out-of-range rate; 409 when the capability is disabled, or a set seller_limit is reached; 429 when creating faster than the rate limit allows.

Query params: limit, cursor (keyset pagination), search (case-insensitive substring over name and external_id), include_archived (off by default).

Each dimension changed writes its own audit row: seller.payout_changed, seller.fee_changed, seller.updated.

Archives the seller: it stops accepting new payments and drops out of the live roster, while its row, payment history, and derivation indexes all survive. Nothing is deleted. Archival emits no webhook — treat your own DELETE call as the event.

Errors: 409 with an intent_ids list while any of that seller's money is still in flight. Settle or resolve those payments first.

Query params: limit, cursor (newest first), seller_id, status (comma-separated, e.g. swept,settle_failed), search (over reference and buyer name/email), from/to (RFC 3339 bounds on created_at, from inclusive, to exclusive).

{ "payments": [ /* ... */ ], "next_cursor": "..." }

Each payment is the full PaymentIntent JSON plus ticker (the pay-in asset's display symbol), seller_account_id, and seller ({ id, name, external_id } or null).

The _ui fields here are floats for display; the exact decimal strings live on the webhook payload.

Also GET /marketplace/stats/timeseries for the same numbers bucketed over time. Aggregated across every seller or narrowed with seller_id. A seller_id is resolved against your marketplace first, so it can never read another marketplace's numbers.

Query params: limit, cursor, seller_id, action.