Generate Feed Link
POST/api/portal/feed/keys
Generates a durable feed link for the signed-in buyer's account and returns it.
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
This is the only response that ever contains the key. It is stored hashed, so it cannot be retrieved later — copy it when it is issued.
The link needs no further authentication, which is what makes it usable from a scheduled job or a spreadsheet formula that cannot send an Authorization header. It carries exactly the same scope as the buyer's portal session: their catalog, their pricing, and the tenant's inventory holdback.
A buyer has one link per location. Calling this again replaces the previous link — the old one stops working immediately, which is also how you rotate a link that has leaked.
Rate limited to 10 requests/minute.
Request
Responses
- 201
- 401
- 403
- 422
- 429
Created
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Validation failed — the body is a field → messages map (Laravel shape) or the platform envelope with a stable machine-readable code. Fix the payload and resubmit.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.