API Reference v1

Authentication

Every request is authenticated with an API key sent as a Bearer token. Create and revoke keys in your workspace under Integrations. A key maps to exactly one organization and can only read that organization's data.

Authorization: Bearer mtab_live_xxxxxxxxxxxxxxxxxxxxxxxx

Missing or invalid keys return 401 Unauthorized. All monetary amounts are integer cents.

Returns the organization the key belongs to, plus the key's name and scopes. Useful as a connectivity and identity check.

{
  "org": { "id": 66, "name": "Demo Co", "slug": "demo", "business_type": "cafe" },
  "key": { "name": "CI server", "scopes": ["read"] }
}

Lists menu items with their variants and prices (in cents).

{
  "data": [
    {
      "id": 18,
      "name": "Latte",
      "variants": [ { "id": 16, "name": "Reg", "price_cents": 450 } ]
    }
  ]
}

Lists recent orders, newest first. Optional query param limit (default 25, max 100).

GET /api/v1/orders?limit=50

{
  "data": [
    {
      "id": 1201,
      "number": "O01201",
      "status": "completed",
      "channel": "online",
      "subtotal_cents": 1300,
      "discount_cents": 0,
      "tax_cents": 0,
      "total_cents": 1300,
      "inserted_at": "2026-05-25T14:00:00Z"
    }
  ]
}

Errors

Errors return a JSON body with an error code and a human-readable message.

401  { "error": "unauthorized", "message": "Provide a valid API key..." }